{"repo":"Print3M/DllShimmer","free":true,"listed":false,"github":"https://github.com/Print3M/DllShimmer","clone":"git clone https://github.com/Print3M/DllShimmer.git","description":"Weaponize DLL hijacking easily. Backdoor any function in any DLL.","language":"Go","stars":751,"topics":["dll-hijacking","dll-sideloading","pentesting","redteam","security","windows","windows-security","backdoor","initial-access","malware"],"license":null,"category":"security-tools","readme_excerpt":"DllShimmer Weaponize DLL hijacking easily. Backdoor any function in any DLL without disrupting normal process operation. How it works DllShimmer parses the original DLL and extracts information about exported functions (name, ordinal number, and forwarder info). Based on this information, DllShimmer creates a boilerplate C++ file ( .cpp ). The generated file allows you to add your own code to each function exported from the original DLL without disrupting the normal operation of the program. No reverse engineering or instrumentation is required, because DllShimmer does not rely on function signatures (see more in “Limitations”). The second file generated is a .def file, which ensures that all DLLs exported from the proxy after compilation will have the same names and ordinal numbers as in the original DLL. After compilation, the EAT in the proxy DLL is an exact copy of the EAT in the original DLL. All names and ordinal numbers of exported functions match, and forwarded functions are forwarded as well. DllShimmer does not explicitly forward all functions (like most tools), creating a completely new and suspicious EAT structure. Installation Compile Go source code or download the compiled binary. Dependencies : - x86 64-w64-mingw32-g++ - x86 64-w64-mingw32-dlltool Usage Example: Parameters: -i / --input [required] The original DLL that you want to backdoor. -o / --output [required] The path to the directory where DllShimmer will save all generated files. -x / --original [requir","default_branch":null,"files":null,"tree":[],"storefront":"/r/Print3M","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/Print3M/DllShimmer/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}