corpus.blog
41,554 blogs · 5,316,985 posts Claim your blog
Record · corpus.blog/posts/01a08c62-6815-7057-a186-fa157a35951e

Hijacking DLLs in Windows

Wietze Beukema · published 22 June 2020

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at wietzebeukema.nl Wayback capture
1blogs citing
First cited
9 Jul 2020
Most recent
9 Jul 2020
Rank this month
not ranked
External links
20
Words captured
8,678

Cited by

Blog
In the post
Date
securityinaction.wordpress.com
Extent of Potential Windows DLL Hijacking Highlighted Read at the source ↗
9 Jul 2020

Links from this post

Link
Host
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-overview
docs.microsoft.com
https://kevinalmansa.github.io/application%20security/DLL-Proxying/
kevinalmansa.github.io
https://docs.microsoft.com/en-us/windows/win32/dlls/dynamic-link-library-search-order
docs.microsoft.com
http://www.hexacorn.com/blog/2013/12/08/beyond-good-ol-run-key-part-5/
hexacorn.com
https://docs.microsoft.com/en-gb/windows/win32/sbscs/application-manifests
docs.microsoft.com
https://docs.microsoft.com/en-gb/windows/win32/dlls/dynamic-link-library-redirection
docs.microsoft.com
https://www.fireeye.com/content/dam/fireeye-www/global/en/current-threats/pdfs/rpt-dll-sideloading.pdf
fireeye.com
https://attack.mitre.org/techniques/T1218/
attack.mitre.org
https://www.microsoft.com/security/blog/2019/09/26/bring-your-own-lolbin-multi-stage-fileless-nodersok-campaign-delivers-rare-node-js-based-malware/
microsoft.com
https://twitter.com/0xCARNAGE/status/1203882560176218113
twitter.com
https://any.run/report/f08ccc040c8d8db60f30a6d1026aa6523e97c6cf52b1b30f083a830a0a65a3a9/3abfc241-3ab0-4016-acbb-040b44199d52
any.run
https://docs.microsoft.com/en-us/sysinternals/downloads/procmon
docs.microsoft.com
https://www.nirsoft.net/utils/dll_export_viewer.html
nirsoft.net
https://www.github.com/wietze/windows-dll-hijacking/
github.com
https://hijacklibs.net
hijacklibs.net
http://www.hexacorn.com/blog/2017/07/31/the-wizard-of-x-oppa-plugx-style/
hexacorn.com
https://docs.microsoft.com/en-us/windows/security/identity-protection/user-account-control/how-user-account-control-works
docs.microsoft.com
https://medium.com/tenable-techblog/uac-bypass-by-mocking-trusted-directories-24a96675f6e
medium.com
https://msdn.microsoft.com/en-us/library/cc751383.aspx
msdn.microsoft.com
https://github.com/wietze/windows-dll-hijacking/blob/master/possible_windows_dll_hijacking.yml
github.com
Elsewhere on wietzebeukema.nl (3)