Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Testing Applications for DLL Preloading Vulnerabilities

netspi.com | blog | #windows | #dll-hijacking | #application-security | #sideloading | #process-monitor

Summary

Explains DLL preloading (sideloading) flaws where apps load attacker-placed DLLs from the search path, showing how to find them with Dependency Walker and Process Monitor, plus mitigation tips.
Published
Collected

original ↗

Related coverage

blog · netspi.com
Shifting Left to Move Forward: Five Steps for Building an Effective Secure Code Review Program
Five steps for an effective secure code review program: build security culture with developers, rotate reviewers, standardize processes and tooling, and catch vulnerabilities before deployment.
blog · netspi.com
The Evolution of Security Frameworks and Key Factors that Affect Software Development
ServiceTitan's Cassio Goldschmidt explains how software security frameworks evolved, and why application type, compliance rules, platform, and programming language shape each company's approach.
blog · netspi.com
Three Keys to Ensuring Application Security from a 40-Year Information Security Veteran
A 40-year information security veteran draws on insurance industry experience: replace FUD with risk illumination, use executive steering committees, and treat vendors as part of your security duty.
blog · netspi.com
Introduction to Hacking Thick Clients: Part 6 – The Memory
The final installment of the thick client series covers memory analysis: dumping a process from Task Manager, extracting strings, and why sensitive data should use mutable types that can be wiped.
blog · netspi.com
Getting Started on Your Application Security Journey
Four myths hold back application security programs, from 'AppSec teams are optional' to 'DevOps shops do not need one'; successful journeys start with a central governing team and defect discovery.
blog · netspi.com
Introduction to Hacking Thick Clients: Part 5 – The API
Thick client series part five covers API monitoring and invocation: API Monitor logs over 500,000 calls during login, and .NET SmokeTest lets testers load assemblies and run individual methods.
back