In this talk, Jake will teach you how to discover vulnerabilities like a rock star using DLL side loading. This technique (ab)uses the way Windows searches for DLLs to load into a program.  The behavior is nearly laughable and introduces serious risks, especially when developers don't understand filesystem permissions.  Attackers know this and use it for privilege escalation and stealthy persistence.  It is being seen in a number of APT compromises and antivirus software has abysmal detection rates.

House Version

Back to BSides Augusta 2015 video list