
Discord DLL Hijacking
How Discord’s DLL search order can be abused to load attacker-controlled code. Covers DLL basics, cross-compiling from Linux with mingw64, procmon analysis, and dropping a rogue d3d12.dll.

How Discord’s DLL search order can be abused to load attacker-controlled code. Covers DLL basics, cross-compiling from Linux with mingw64, procmon analysis, and dropping a rogue d3d12.dll.

Breaking down the Heaven’s Gate technique: WoW64 internals, how Windows handles 32-bit processes on 64-bit systems, and what actually happens at that far jump switching code segments — with live debugging in x32dbg and WinDbg.