# TrustJack | Yet Another PoC For Hijacking DLLs in Windows

**URL:** <https://onehack.st/t/trustjack-yet-another-poc-for-hijacking-dlls-in-windows/98433>\
**Category:** Tools & Scripts\
**Tags:** programming, windows\
**Created:** [July 29, 2020, 11:13am UTC](https://onehack.st/t/trustjack-yet-another-poc-for-hijacking-dlls-in-windows/98433 "2020-07-29T11:13:13Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Prometheus](https://onehack.st/user_avatar/onehack.st/prometheus/32/34950_2.png) [@Prometheus](https://onehack.st/u/Prometheus)\
**Post date:** [July 29, 2020, 11:13am UTC](https://onehack.st/t/trustjack-yet-another-poc-for-hijacking-dlls-in-windows/98433/1 "2020-07-29T11:13:14Z")

</div>

[![](https://i.ibb.co/dm9P87m/68747470733a2f2f7265647465616d65722e746970732f77702d636f6e74656e742f75706c6f6164732f323032302f30372f.gif) ](https://i.ibb.co/dm9P87m/68747470733a2f2f7265647465616d65722e746970732f77702d636f6e74656e742f75706c6f6164732f323032302f30372f.gif)

Yet another PoC for [https://www.wietzebeukema.nl/blog/hijacking-dlls-in-windows](https://www.wietzebeukema.nl/blog/hijacking-dlls-in-windows)  
Blogpost: [https://redteamer.tips/?p=108](https://redteamer.tips/?p=108)  
To be used with a cmd that does whatever the F you want, for a dll that pops cmd, [https://github.com/jfmaes/CMDLL](https://github.com/jfmaes/CMDLL). check the list in wietze’s site to check how you should call your dll.

will automatically create c:Windows System32 and drop your dll and chosen binary in there, followed by execution. Clean up after yourself by running trustjack again with the -c flag.  
You migh be missing fody 2.0, run nuget package restore to fix (right click Solution ‘TrustJacker’ and select ‘restore NuGet packages’)

```auto
 _______ _ _ _
| ____ | | | | | | |
   | |_ ___ ____ | |_ | | ______ | | __
   | | ' __| | | /__ | __| | |/ _` |/__ | |/ /
   | | | | |_| __|| |__ | | (_| | (__| <
   |_|_| __,_|___ / ______/__ ,_|___|_|_

 V1.0.0 by https://twitter.com/Jean_Maes_1994
Usage:
      --dllpath=VALUE Path to the dll on the computer
      --binary=VALUE The binary name to pop the shell
  -c, --clean, --cleanup Cleanup the fake folder and it's contents
  -h, -?, --help show this help menu.

```

## GitHub:

[https://github.com/jfmaes/TrustJack](https://github.com/jfmaes/TrustJack)