---
id: 9794
title: "Automating DLL Hijack Discovery"
source_domain: specterops.io
source_url: "https://specterops.io/blog/2020/06/30/automating-dll-hijack-discovery/"
published_at: "2020-06-30T14:44:00Z"
phying_url: "https://phying.com/item/9794"
lang: en
---

# Automating DLL Hijack Discovery

## Summary

Introduction This blogpost will describe the concept of dynamic-link library (DLL) search order hijacking and how it can be used for userland persistence on Windows systems. This technique is mapped to MITRE ATT&CK under DLL Search Order Hijacking (T1038). DLL hijacking is useful to an attacker for a myriad of reasons, but this post will focus […]

## Intelligence Metadata

- **Sources:** specterops.io
- **Published:** 2020-06-30T14:44:00Z
- **Original:** https://specterops.io/blog/2020/06/30/automating-dll-hijack-discovery/
- **Phying News:** https://phying.com/item/9794