r/bugbounty•
Jayendra_J

[Tool Release] DLLHijackHunter - Automated DLL hijacking detection with canary confirmation

Tool

Built a scanner that doesn't just flag missing DLLs, it actually proves they can be hijacked by dropping a canary DLL and checking if it executes.

Found 4 SYSTEM privilege escalations in enterprise software during testing (disclosure pending).

Key features: Zero false positives, 8-gate filter + canary confirmation

Detects .local bypasses, KnownDLL hijacks, Phantom DLLs

Auto-generates proxy DLLs

Would love feedback from the community.

Github: https://github.com/ghostvectoracademy/DLLHijackHunter

Posted Mar 3, 2026, 11:29 AM UTC

11
Loading comments…