All About DLL Hijacking - My Favorite Persistence Method

Name: All About DLL Hijacking - My Favorite Persistence Method
Uploaded: 2022-03-20T18:03:51Z
Channel: IppSec
Description: 00:00 - Intro 00:25 - Why DLL Hijack is my favorite persistence, talk about a few others 02:03 - Going over the source code to our sample applications t...

IppSec · Beginner ·🛡️ AI Safety & Ethics ·4y ago

00:00 - Intro 00:25 - Why DLL Hijack is my favorite persistence, talk about a few others 02:03 - Going over the source code to our sample applications to talk about DLL Hijacking 03:20 - Compiling our executable and dll then transfering it to our windows box 04:50 - Using Process Monitor to show standard DLL Hijacking (when a DLL Does not exist) 06:10 - Showing the order windows tries to load the DLL (Directory of binary then PATH) 07:20 - Talking about a somewhat common mistake when people make edits to the PATH (ex: Java/Python/etc) 09:00 - Placing the DLL test.exe is looking for and achievi…

Watch on YouTube ↗ (saves to browser)

Chapters (13)

Intro

0:25 Why DLL Hijack is my favorite persistence, talk about a few others

2:03 Going over the source code to our sample applications to talk about DLL Hijack

3:20 Compiling our executable and dll then transfering it to our windows box

4:50 Using Process Monitor to show standard DLL Hijacking (when a DLL Does not exis

6:10 Showing the order windows tries to load the DLL (Directory of binary then PATH

7:20 Talking about a somewhat common mistake when people make edits to the PATH (ex

9:00 Placing the DLL test.exe is looking for and achieving code execution

11:25 Showing if we can write in c:\Windows, we can hijack most dll's explorer.exe l

14:00 Messing up using Process Monitor for a bit, sorry should have prepped a bit mo

15:30 Showing why explorer is unique, then putting CSCAPI.DLL into c:\Windows\... Th

17:55 DLL Hijacking OneDrive for user level persistence

19:30 Wrapping up, talking about some videos where I talk more about creating DLL's

Playlist

Uploads from IppSec · IppSec · 0 of 60

← Previous Next →