HijackLibs is a project for DLL Hijacking scenarios. “DLL Hijacking is, in the broadest sense, tricking a legitimate/trusted application into loading an arbitrary DLL.”

This project provides a curated list of DLL Hijacking candidates. A mapping between DLLs and vulnerable executables is kept and can be searched via this website. Additionally, further metadata such as resources provide more context.

For defenders, this project can provide valuable information when trying to detect DLL Hijacking attempts. To further support defenders, out-of-the-box Sigma rules are provided through this website. Several Sigma feeds containing detection rules for all entries part of this project is available too.

For red teamers, this project can help identify DLLs that can be used to achieve DLL Hijacking. The aim of this project is not to make it easy to abuse the recorded vulnerabilities; as such, PoCs, code templates or tutorials are not provided.

This project offers a number of generated files, including JSON and CSV, containing all of the project's data. Because they are automatically updated to the latest version, they can be used in automated processes. More information can be found on the API page.

This project is fully open source and is maintained by the community. Everyone can contribute, and new contributions are more than welcome - please head to this project's GitHub page to find the contribution guide.