DLL Universal Patcher is a flexible and convenient code patcher that doesn’t touch the files on disk.
It can be used for replacing any tasks that you’d otherwise achieve with on-disk patching, such as fixing old software on modern machines, or fixing bugs in others’ software.
In addition, due to more control over when the patching happens, it is possible to patch packed executables.
version.dll
dll-proxy-generator.exe --import-dll "dll_universal_patcher.dll" --import "dummy" "C:\Windows\System32\version.dll"
to generate a suitable proxy dllpatches.json
(more on this later)dll_universal_patcher.dll
, and patches.json
in target directory to perform dll hijackingversion.dll
dll-proxy-generator.exe --import-dll "dll_universal_patcher.dll" --import "dummy" "C:\Windows\System32\version.dll"
to generate a suitable proxy dllpatches.json
(more on this later)RCDATA
resource with ID 1
and neutral language to dll_universal_patcher.dll
dll_universal_patcher.dll
in target directory to perform dll hijacking[
{
"modules": [ "winver.exe", "{exe}" ],
"pattern": "01 02 03 04 05 ? 06 ?? 07",
"replacement": "90 90 90 90 C3",
"min_matches": 1,
"max_matches": 3,
"on_initialize": false,
"on_process_initialized": true,
"on_before_dllmain": false,
"is_code": true,
"allowed_to_fail": false,
"multishot": false
}
]
For more info on the options, check out the schema
bomber is an application that scans SBOMs for security vulnerabilities. So you've asked a vendor…
Embed a payload within a PNG file by splitting the payload across multiple IDAT sections.…
Exploit-Street, where we dive into the ever-evolving world of cybersecurity with a focus on Local…
Shadow Dumper is a powerful tool used to dump LSASS (Local Security Authority Subsystem Service)…
shadow-rs is a Windows kernel rootkit written in Rust, demonstrating advanced techniques for kernel manipulation…
Extract and execute a PE embedded within a PNG file using an LNK file. The…