[Tool Release] DLLHijackHunter - Automated DLL hijacking detection with canary confirmation

Built a scanner that doesn't just flag missing DLLs, it actually proves they can be hijacked by dropping a canary DLL and checking if it executes.

Found 4 SYSTEM privilege escalations in enterprise software during testing (disclosure pending).

Key features:

•	Zero false positives (8-gate filter + canary confirmation)

•	Detects .local bypasses, KnownDLL hijacks, Phantom DLLs

•	Auto-generates proxy DLLs

•	

GitHub: https://github.com/ghostvectoracademy/DLLHijackHunter

Would love feedback from the community.

Posted Mar 3, 2026, 11:48 AM UTC

50
Loading comments…