Tags: ghostvectoracademy/DLLHijackHunter
Tags
fix: apply 14 codebase audit fixes across logic, functionality, and q… …uality Logic errors: - Fix duplicate UseCases accumulation in PrivilegeDeltaFilter - Cache AllImportedDlls in PEAnalysisResult (avoid re-allocation) - Validate profile names in ScanProfile.FromName (warn on typos) - Guard WindowsIdentity.GetCurrent() in AttackChainCorrelator - Add --min-confidence range validation (0-100) Missing functionality: - Wire ScanLogger into StaticDiscovery, FilterPipeline, Canary, ETW - Include attack chains in JSON/HTML output (not just console) - Add FORCE_INTEGRITY check to SignatureVerificationFilter - Add uac-bypass to --profile CLI help text Code quality: - Add PE analysis cache to WinSxSManifestFilter - Clean up MSVC .obj/.lib/.exp/.pdb artifacts in CanaryDllBuilder - Deduplicate KnownDlls loading (share via KnownDllsFilter) - Fix env-var expansion order in ServiceEnumerator.ParseServiceImagePath - Add LocalServer32 scanning to COMEnumerator
Add UAC bypass module: COM AutoElevation, side-load simulation, and i… …mprovements - Add AutoElevateEnumerator with manifest scanning and COM Elevation\Enabled=1 discovery - Add side-load simulation for AutoElevate binaries without SetDllDirectory protection - Add IsSimulatedCopyAttack flag and auto-pass in WritabilityFilter - Add UACBypass to TriggerType enum, fix ExecutionContext -> DiscoveryContext - Add uac-bypass scan profile, fix TriggerAutoElevate default to false - Add confidence bonus and Copy & Side-Load use case in TieredScorer - Add 5 new tests for UAC bypass scoring and side-load simulation - Rewrite README with professional formatting and updated feature docs - Bump version to v1.2.0