Anyone have eyes on this report of NotePad++ compromise via default plugin?
#NotePadPP #mineTools #DLLHijack #WikiLoader
Walkthrough of a DLL hijacking technique known as "DLL proxying" from start to finish. This technique hijacks execution of an EXE and proxies exported functions from the crafted malicious DLL to a legitimate DLL on disk.
This example uses MsMpEng.exe (WinDefender) with the hijacked DLL mpclient.dll
Link: https://wsummerhill.github.io/redteam/2022/10/02/DLL-sideloading.html
#dllhijack #redteam #malware
I’m going to cover an example of how to perform a DLL sideload from start to finish using a C++ payload and a legitimate DLL commonly found on disk. The specific technique covered is known as “DLL proxying” where we use the legitimate DLL along with a malicious DLL which exports all the functions that the legit DLL to execute properly.
Offensive Sequence
Crazypedia⍼
WILL i AM🍌
RSS Feeeder/LTL News