Desktop (Thick) Client Pentesting - DLL Hijacking

YOU CAN SUPPORT MY WORK BY BUYING A COFFEE
---------------------------------------------------
https://www.buymeacoffee.com/lsecqt

Desktop or "Thick" client apps are not common, but still can be encountered on engagement. They require different approach for Pentesting and one of the vulnerabilities you can test for is DLL Hijacking. It is done by replacing missing or present libraries with custom and malicious ones.

❤️ Help the channel grow with a Like, Comment, & Subscribe!

JOIN MY DISCORD TO SHARE KNOWLEDGE AND EXPERIENCE
---------------------------------------------------
  / discord  

LINKS
---------------------------------------------------
DVTA : https://github.com/srini0x00/dvta

FOLLOW ME
---------------------------------------------------
Twitter:   / lsecqt  
Twitch:   / lsecqt  
Reddit:   / lsecqt  

TIMESTAMPS
--------------------------------------------------
00:00 - Intro
00:40 - DVTA walkthrough
02:41 - Finding DLL Hijacking vulnerability with procmon
06:11 - Generating malicious dll and hijacking the missing one
10:57 - Outro

Hope you learned something new.