windows community v1.0.0

libcares-2.dll

libcares-2.dll — Sideloading hijacking (c-ares)

📋 Live Preview
libcares-2.dll
libcares-2.dll

Sandbox: execFile · Timeout: 30s

Capabilities

security.defenseevasion.dll-hijack

Documentation

examples:

  • description: "Place malicious libcares-2.dll in the search order location" command: "copy malicious.dll "%LOCALAPPDATA%\GitKraken\app-%VERSION%\libcares-2.dll""
  • description: "Execute the vulnerable binary to trigger the hijack" command: ""ahost.exe""

libcares-2.dll

Vendor: c-ares

Expected Location: %LOCALAPPDATA%\GitKraken\app-%VERSION%

Vulnerable Executables:

  • ahost.exe (Sideloading)

References