Spartacus DLL/COM Hijacking Toolkit
Demonstrating 3 persistence layers from a single EXE, that converts itself into proxy DLLs at runtime
Anvil is a runtime-first attack surface assessment tool for Windows thick client applications, built for penetration testers and security researchers conducting targeted application security assessments. It covers multiple attack classes in a single targeted run.
Windows Local Privilege Escalation Tool. Exploits COM server hijacking to elevate privileges from local service to SYSTEM.
Fileless Persistence Engine -- 7 techniques that survive reboot without writing a single file to disk. Pure Go.
Demonstrate 3 persistence layers from one EXE that converts into proxy DLLs at runtime for Windows security research
C++ COM object hijacking detector for persistence attack prevention
COM-hijack & persistence detector (C#/.NET) — parses .reg exports, maps to MITRE ATT&CK, emits Sigma. JSON out, CI-tested.
Field report + detection toolkit for a Windows crypto clipboard hijacker that swaps BTC/ETH/LTC/XMR addresses and hides as msedgeview.dll (fake WebView2) via a WPDShServiceObj COM hijack in HKCU. Includes canary test, IOC checker and removal script.
To associate your repository with the com-hijacking topic, visit your repo's landing page and select "manage topics."