Koppeling - Adaptive DLL Hijacking / Dynamic Export Forwarding

This project is a demonstration of advanced DLL hijack techniques. It was released in conjunction with the "Adaptive DLL Hijacking" blog post. I recommend you start there to contextualize this code.

This project is comprised of the following elements:

• Harness.exe: The "victim" application which is vulnerable to hijacking (static/dynamic)
• Functions.dll: The "real" library which exposes valid functionality to the harness
• Theif.dll: The "evil" library which is attempting to gain execution
• NetClone.exe: A C# application which will clone exports from one DLL to another
• PyClone.py: A python 3 script which mimics NetClone functionality

The VS solution itself supports 4 build configurations which map to 4 different methods of proxying functionality. This should provide a nice scalable way of demonstrating more techniques in the future.

• Stc-Forward: Forwards export names during the build process using linker comments
• Dyn-NetClone: Clones the export table from functions.dll onto theif.dll post-build using NetClone
• Dyn-PyClone: Clones the export table from functions.dll onto theif.dll post-build using PyClone
• Dyn-Rebuild: Rebuilds the export table and patches linked import tables post-load to dynamically prepare for function proxying

The goal of each technique is to successfully capture code execution while proxying functionality to the legitimate DLL. Each technique is tested to ensure static and dynamic sink situations are handled. This is by far not every primitive or technique variation. The post above goes into more detail.

Example

Prepare a hijack scenario with an obviously incorrect DLL

> copy C:\windows\system32\whoami.exe .\whoami.exe
        1 file(s) copied.

> copy C:\windows\system32\kernel32.dll .\wkscli.dll
        1 file(s) copied.

Executing in the current configuration should result in an error

> whoami.exe 

"Entry Point Not Found"

Convert kernel32 to proxy functionality for wkscli

> NetClone.exe --target C:\windows\system32\kernel32.dll --reference C:\windows\system32\wkscli.dll --output wkscli.dll
[+] Done.

> whoami.exe
COMPUTER\User

Download Koppeling

Related articles

1. How To Install Pentest Tools In Ubuntu
2. Hacking Tools And Software
3. Hacking Tools Pc
4. Hack Rom Tools
5. Hacking Tools Pc
6. Pentest Tools Port Scanner
7. Pentest Tools Android
8. Pentest Tools Nmap
9. Hacking Tools For Mac
10. Hacking Tools For Pc
11. Usb Pentest Tools
12. Hacking Tools And Software
13. Pentest Automation Tools
14. Pentest Box Tools Download
15. Hacker Tools For Pc
16. Hacker Tools Github
17. New Hacker Tools
18. Black Hat Hacker Tools
19. Android Hack Tools Github
20. Hacker Tools Mac
21. Hack Website Online Tool
22. Hack Tools Pc
23. Hacking Tools For Pc
24. Hacker Tools
25. Pentest Reporting Tools
26. Hack Tools Mac
27. Physical Pentest Tools
28. Pentest Tools Linux
29. Hacking Tools For Windows
30. Hack Tools Github
31. Best Pentesting Tools 2018
32. Physical Pentest Tools
33. Hacking Tools Mac
34. Pentest Automation Tools
35. Physical Pentest Tools
36. Hacks And Tools
37. Pentest Tools Website Vulnerability
38. Hacker Tools 2020
39. Pentest Tools Subdomain
40. Hack Tools 2019
41. Hack Tools For Mac
42. Pentest Tools
43. Hacking Tools For Kali Linux
44. Hacking Tools For Beginners
45. Hack Tools
46. Game Hacking
47. How To Hack
48. Pentest Tools For Mac
49. Hack Tools For Pc
50. Blackhat Hacker Tools
51. Pentest Tools Open Source
52. Hacking Tools For Kali Linux
53. Hack Tools For Pc
54. Hacker Tools
55. Hack Apps
56. Hacker Search Tools
57. Hacking Tools Pc
58. Hacking Tools Usb
59. Hacker Tools Hardware
60. Hacker Security Tools
61. Hacker Tools 2019
62. Hacking App
63. Hackers Toolbox
64. Hack Tools For Pc
65. Pentest Tools For Ubuntu
66. Pentest Tools Free
67. Hacker Tools List
68. Hacker Tools Mac
69. Pentest Tools For Android
70. Hacking Tools Pc
71. Hacker Tools Software
72. Pentest Tools Windows
73. Pentest Tools Android
74. Hack Tools For Ubuntu
75. Hack Tools For Pc
76. Pentest Tools Online
77. Hacking Tools Pc
78. Hacking Tools For Mac
79. Hacking Tools Windows
80. Pentest Recon Tools
81. Top Pentest Tools
82. Pentest Tools Free
83. Hack Apps
84. Nsa Hack Tools
85. Pentest Tools For Windows
86. Termux Hacking Tools 2019
87. Hack Tools Github
88. Pentest Tools Free
89. Pentest Tools Online
90. Hacking Tools Pc
91. Hacking Tools Windows 10
92. Physical Pentest Tools
93. Hacking Tools For Beginners
94. Android Hack Tools Github
95. Nsa Hack Tools
96. Nsa Hack Tools Download
97. Nsa Hack Tools Download
98. Hacker Tools Apk
99. Hack Tools Pc
100. Hack Tool Apk No Root
101. Hack Tool Apk No Root
102. Pentest Box Tools Download
103. Hacking Tools For Mac
104. Hack Tools For Windows
105. Hack Tools For Ubuntu
106. Hacking Tools Download
107. Pentest Tools Windows
108. Hacker Tools For Windows
109. Game Hacking
110. Hacking Tools Name
111. Hack Rom Tools
112. Hacker Tool Kit
113. Hacker Tools Apk
114. Hacking Tools Free Download