DLL Universal Patcher is a flexible and convenient code patcher that doesn’t touch the files on disk.
It can be used for replacing any tasks that you’d otherwise achieve with on-disk patching, such as fixing old software on modern machines, or fixing bugs in others’ software.
In addition, due to more control over when the patching happens, it is possible to patch packed executables.
version.dll
dll-proxy-generator.exe --import-dll "dll_universal_patcher.dll" --import "dummy" "C:\Windows\System32\version.dll"
to generate a suitable proxy dllpatches.json
(more on this later)dll_universal_patcher.dll
, and patches.json
in target directory to perform dll hijackingversion.dll
dll-proxy-generator.exe --import-dll "dll_universal_patcher.dll" --import "dummy" "C:\Windows\System32\version.dll"
to generate a suitable proxy dllpatches.json
(more on this later)RCDATA
resource with ID 1
and neutral language to dll_universal_patcher.dll
dll_universal_patcher.dll
in target directory to perform dll hijacking[
{
"modules": [ "winver.exe", "{exe}" ],
"pattern": "01 02 03 04 05 ? 06 ?? 07",
"replacement": "90 90 90 90 C3",
"min_matches": 1,
"max_matches": 3,
"on_initialize": false,
"on_process_initialized": true,
"on_before_dllmain": false,
"is_code": true,
"allowed_to_fail": false,
"multishot": false
}
]
For more info on the options, check out the schema
Comprehensive repository for presentation slides from major cybersecurity conferences held in 2023 and 2024. It…
Generate a proxy dll for arbitrary dll, while also loading a user-defined secondary dll. In…
RustiveDump is a Rust-based tool designed to dump the memory of the lsass.exe process using…
This C# program finds Windows Defender folder exclusions using Windows Defender through its command-line tool…
Argus is an all-in-one, Python-powered toolkit designed to streamline the process of information gathering and…
A specialized tool designed for user enumeration on the Slack platform. This powerful utility aids…