DLL sideload

https://habr.com/ru/articles/1067126/

Dll Hijacking

https://habr.com/ru/articles/988684/

https://elliotonsecurity.com/perfect-dll-hijacking/

https://gist.github.com/bats3c/59932dfa1f5bb23dd36071119b91af0f

UAC bypass

https://github.com/hfiref0x/UACME

ETXTBSY pkgadd dynamic

Linux error ETXTBSY for mapped .so files

https://www.reddit.com/r/C_Programming/comments/1cvja7k/is_it_possible_to_link_dynamically_changing_so/?tl=ru

https://nullprogram.com/blog/2014/12/23/

https://lwn.net/Articles/866493/

https://tritium.legal/blog/update

https://news.ycombinator.com/item?id=45555749

https://unix.stackexchange.com/questions/74165/how-to-upgrade-shared-library-without-crash

https://stackoverflow.com/questions/69655099/what-would-happen-if-i-delete-replace-the-shared-library-after-it-has-been-expli

!!!

https://samuel.karp.dev/blog/2019/04/a-runc-container-escape/

--- habr exe

https://habr.com/ru/articles/1036444/

А как загружаемая библиотека (libXXX.so) попадает в память? И почему программу нельзя перезаписать "cp prog.new prog" - будет ошибка ETXTBSY, а библиотеку .so можно, но даже если новая и старая версии библиотеки совпадают, всё падает?

https://stackoverflow.com/questions/7767325/replacing-shared-object-so-file-while-main-program-is-running

--- manydl

manydl.c is a program to show that Linux is capable of dlopen-ing many plugins (typically, several hundred thousands or many millions). It works by generating some pseudo-random C file, compiling it into a plugin, which is later dlopen-ed, and repeat.

https://stackoverflow.com/questions/10034785/can-a-c-c-linux-shared-library-auto-update-by-overwriting-its-own-file-on-disk?rq=3

https://github.com/bstarynk/misc-basile/

reflective dll loader github

 reflective dll loader github

https://oldboy21.github.io/posts/2023/12/all-i-want-for-christmas-is-reflective-dll-injection/

https://k0deless.github.io/posts/pe-file-format/

https://tech-zealots.com/malware-analysis/understanding-concepts-of-va-rva-and-offset/

https://github.com/hasherezade/pe-bear

https://github.com/stephenfewer/ReflectiveDLLInjection

https://github.com/topics/reflective-injection

https://github.com/mochabyte0x/MochiLdr

https://github.com/rokups/ReflectiveLdr

https://github.com/Krypteria/AtlasLdr

https://blog.malicious.group/writing-your-own-rdi-srdi-loader-using-c-and-asm/#tl-dr

https://www.ired.team/offensive-security/code-injection-process-injection/reflective-dll-injection

https://github.com/CylanceVulnResearch/ReflectiveDLLRefresher

!!!

https://github.com/stephenfewer/ReflectiveDLLInjection

https://github.com/monoxgas/sRDI

https://github.com/scriptchildie/GoDll2Shellcode

https://otterhacker.github.io/Malware/Reflective%20DLL%20injection.html

https://www.ired.team/offensive-security/code-injection-process-injection/reflective-dll-injection

!!!

https://github.com/oldboy21/RflDllOb?tab=readme-ov-file

https://oldboy21.github.io/posts/2023/12/all-i-want-for-christmas-is-reflective-dll-injection/

https://github.com/hasherezade/pe-bear/releases/tag/v0.7.1

https://www.ired.team/offensive-security/code-injection-process-injection/reflective-shellcode-dll-injection

https://github.com/monoxgas/sRDI

https://medium.com/@s12deff/reflective-dll-injection-e2955cc16a77

https://blog.malicious.group/writing-your-own-rdi-srdi-loader-using-c-and-asm/

https://www.twingate.com/blog/glossary/reflective%20dll%20injection

https://www.depthsecurity.com/blog/reflective-dll-injection-in-c/

https://www.microsoft.com/en-us/security/blog/2017/11/13/detecting-reflective-dll-loading-with-windows-defender-atp/

https://github.com/Arasimnida/reflective-pe-loader

https://github.com/jaredhaight/ReflectCmd

https://fluxsec.red/reflective-dll-injection-in-c

Load DLL into Linux

https://github.com/McSimp/linoodle

Load Windows Drivers to FreeBSD

https://github.com/NDISulator/ndisulator

Latest NVIDIA on FreeBSD

https://gist.github.com/Mostly-BSD/4d3cacc0ee2f045ed8505005fd664c6e

Browser

Brave, Chrome, Edge, Opera or Vivaldi

https://github.com/mrclksr/linux-browser-installer