DevilBot000 / DLLFinder

DLLFinder is a powerful and efficient C tool designed to provide developers and security professionals with the ability to enumerate all the Dynamic Link Libraries (DLLs) loaded by a specified process on the Windows operating system.It also helps to find "rwx" section of a PE File, if present

DLLFinder

DLLFinder is a powerful and efficient C tool designed to provide developers and security professionals with the ability to enumerate all the Dynamic Link Libraries (DLLs) loaded by a specified process on the Windows operating system.

Features

• DLLs Enumeration
• MockingJay Support

Commands

• Enumerating Dlls

dllfinder.exe --process_name "notepad.exe" 

• MockingJay

dllfinder.exe  --mockingjay --PEfilePath "file_path" 

Windows API Used

• FindTargetProc
• OpenProcess
• CreateToolhelp32Snapshot
• Process32First
• Process32Next
• EnumProcessModulesEx
• GetModuleFileNameExA

Working POC

Refrences

• https://github.com/0xRick/PE-Parser
• https://www.securityjoes.com/post/process-mockingjay-echoing-rwx-in-userland-to-achieve-code-execution