Welcome in here.. Indonesian Blogsite by FUNderSec
Technologist [Umbrella of CyberUnderground Portal]

Anti-Spyware Tool-Dll Hijack Auditor + Portable






DllHijackAuditor


DllHijackAuditor is the smart tool to Audit against the Dll Hijacking Vulnerability in any 
Windows application. This is recently discovered critical security issue affecting almost all 
Windows systems on the planet. It appears that large amount of Windows applications are currently 
susceptible to this vulnerability which can allow any attacker to completely take over the system.
DllHijackAuditor helps in discovering all such Vulnerable Dlls in a Windows application which 
otherwise can lead to successful exploitation resulting in total compromise of the system. 
With its simple GUI interface DllHijackAuditor makes it easy for anyone to instantly perform 
the auditing operation. It also presents detailed technical Audit report which can help the 
developer in fixing all vulnerable points in the application.

New version v2 brings out following features,


     New & Smart Debugger based 'Interception Engine' for consistent and efficient performance.
     Support for specifying as well as auditing of application with custom & multiple Extensions.
     Timeout Configuration to alter the waiting time for each Application.



DllHijackAuditor is a standalone portable application which also comes with Installer for local 
Installation & Uninstallation of software. It works on wide range of platforms starting from 
Windows XP to latest operating system, Windows 7.



Features of DllHijackAuditor
Here are some of the smart features of DllHijackAuditor,


     Directly & Instantly audit any Windows Application.


     Allows complete testing to uncover all Vulnerable points in the target Application


     Smart Debugger based 'Interception Engine' for consistent and efficent performance without 
intrusion.


     Support for specifying as well as auditing of application with custom & multiple Extensions.


     Timeout Configuration to alter the waiting time for each Application.


     Generates complete auditing report (in HTML format) about all vulnerable hijack points in the 
Application.


     GUI based tool, makes it easy for anyone with minimum knowledge to perform the auditing operation.


     Does not require any special privilege for auditing of the application (unless target 
application requires)


     Free from Antivirus as it does not use any shellcodes or exploit codes which trigger 
Antivirus to terminate the operation.


     Fully portable tool which can be run directly on any system.


     Support for local Installation and uninstallation of the software.




Installing DllHijackAuditor


DllHijackAuditor comes with Installer so that you can install it locally on your system for 
regular usage. It has intuitive setup wizard (as shown in the screenshot below) which guides 
you through series of steps in completion of installation. At any point of time you can use 
Uninstaller to remove the software from the system.

DllHijackAuditor Installer



Using DllHijackAuditor


Here are simple tests to use DllHijackAuditor for auditing of any Windows application.
Launch the DllHijackAuditor after copying it or installing it on your local system. 
You will see it as shown in the Screenshot 1
Now click on 'Browse' button to select application and then click on 'Start Audit' 
to begin the operation.


     Next click on 'Exploit' button (only if it has found any vulnerable DLLs in the previous phase) 
to perform real Exploitation test.


     Finally click on 'Report' button to generate complete Audit report.


You can tick the check box ( 'Do not terminate application' ) to make DllHijackAuditor to wait 
until you perform complete testing of all vulnerable points within the application. Once you 
are done with the testing, close the application so that DllHijackAuditor will continue with 
auditing operation.

1 komentar:

  1. Hi all,

    DllHijackAuditor helps in discovering all such Vulnerable Dlls in any Windows application which can lead to successful exploitation of this DLL Hijack Vulnerability. Thanks a lot.....

    BalasHapus

FUNderSec Blogsite. Diberdayakan oleh Blogger.
 

[.// FUNderSec Blogsite //.] Copyright © 2010 - 2012 | Template design by O Pregador | Powered by Blogger Templates

Thanks For Visiting My Simple Blog, ^0^ I Love You All My Visitors And FUNderSec Fans. Dont Forget Come Here Again | FUNderSec |