DLL Hijacking

dynamik

Here's a demo of DLL hijack attacks using SET/Metasploit: The Social-Engineer Toolkit - Metasploit DLL Hijack Zero Day on Vimeo

Here's the full story and (in)action from Microsoft: Microsoft won't patch critical DLL loading bugs

Is anyone else following this?
*

undomiel

No surprise there that Microsoft won't patch it outright as it could affect backwards compatibility. Hopefully they at least patch the applications that ship with Windows.

Paul Boz

Yeah dude Nelson texted me a link to that this morning just as I got to work, then I saw that you posted it too, but we block streaming media @ work so I've had to wait all day. That's so nasty!

I miss doing that stuff already