Skip to content

Tags: ghostvectoracademy/DLLHijackHunter

Tags

v2.3.0

Toggle v2.3.0's commit message
fix: apply 14 codebase audit fixes across logic, functionality, and q…

…uality

Logic errors:
- Fix duplicate UseCases accumulation in PrivilegeDeltaFilter
- Cache AllImportedDlls in PEAnalysisResult (avoid re-allocation)
- Validate profile names in ScanProfile.FromName (warn on typos)
- Guard WindowsIdentity.GetCurrent() in AttackChainCorrelator
- Add --min-confidence range validation (0-100)

Missing functionality:
- Wire ScanLogger into StaticDiscovery, FilterPipeline, Canary, ETW
- Include attack chains in JSON/HTML output (not just console)
- Add FORCE_INTEGRITY check to SignatureVerificationFilter
- Add uac-bypass to --profile CLI help text

Code quality:
- Add PE analysis cache to WinSxSManifestFilter
- Clean up MSVC .obj/.lib/.exp/.pdb artifacts in CanaryDllBuilder
- Deduplicate KnownDlls loading (share via KnownDllsFilter)
- Fix env-var expansion order in ServiceEnumerator.ParseServiceImagePath
- Add LocalServer32 scanning to COMEnumerator

v2.2.0

Toggle v2.2.0's commit message
update readme

v2.1.0

Toggle v2.1.0's commit message
Bump version to 2.1.0 and add LPE-only flag

v2.0.0

Toggle v2.0.0's commit message
Release v2.0.0

v1.3.0

Toggle v1.3.0's commit message
feat: v1.3.0 - Threat Intelligence, Automated PATH Exploitation, and …

…497+ Phantom DLLs

v1.2.0

Toggle v1.2.0's commit message
Add UAC bypass module: COM AutoElevation, side-load simulation, and i…

…mprovements

- Add AutoElevateEnumerator with manifest scanning and COM Elevation\Enabled=1 discovery
- Add side-load simulation for AutoElevate binaries without SetDllDirectory protection
- Add IsSimulatedCopyAttack flag and auto-pass in WritabilityFilter
- Add UACBypass to TriggerType enum, fix ExecutionContext -> DiscoveryContext
- Add uac-bypass scan profile, fix TriggerAutoElevate default to false
- Add confidence bonus and Copy & Side-Load use case in TieredScorer
- Add 5 new tests for UAC bypass scoring and side-load simulation
- Rewrite README with professional formatting and updated feature docs
- Bump version to v1.2.0

v1.1.0

Toggle v1.1.0's commit message
v1.1.0 — Code Quality & Developer Experience

v1.0.0

Toggle v1.0.0's commit message
Remove release/ from repo, add to .gitignore - use GitHub Releases in…

…stead