https://github.com/Mr-Un1k0d3r/WindowsDllsExport

A list of all the DLLs export in C:\windows\system32\
https://github.com/Mr-Un1k0d3r/WindowsDllsExport

Last synced: 3 months ago
JSON representation

A list of all the DLLs export in C:\windows\system32\

• Host: GitHub
• URL: https://github.com/Mr-Un1k0d3r/WindowsDllsExport
• Owner: Mr-Un1k0d3r
• Created: 2021-12-16T16:23:00.000Z (almost 3 years ago)
• Default Branch: main
• Last Pushed: 2021-12-22T17:54:57.000Z (almost 3 years ago)
• Last Synced: 2024-05-02T01:47:48.440Z (6 months ago)
• Language: C
• Size: 5.81 MB
• Stars: 205
• Watchers: 8
• Forks: 35
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - Mr-Un1k0d3r/WindowsDllsExport - A list of all the DLLs export in C:\windows\system32\ (C)

README

        
# WindowsDllsExport

A list of all the DLLs export in C:\windows\system32\

The idea is to find some interesting export that can be used to evade some detection.

The list was extracted from the following builds:

```

Windows 10 Build 19043

Windows 11 Build 22000

```

# Generate The List By Yourself

DumpExport.c can be compiled and run locally.

DumpExport.exe can be used to gather the information on your system.

```

PS> foreach($dll in gci -Path C:\windows\system32\ -Filter *.dll) { .\dumpexport.exe $($dll.Name) | out-file -FilePath .\$($dll.Name).txt -Encoding ASCII }

```

# Sqlite Database 

the `exports.db` is a sqlite3 database that contains the dll name and the export name in a table defined as following

`table|exports|exports|2|CREATE TABLE exports (dllname text, exportname text)`

The sqlite database can be imported into `sqlite_web` to query the database from a web interface.

`pip3 install sqlite_web`

Copy the `exports.db` and run `sqlite_web` using the following command

```

sqlite_web -H 0.0.0.0 -p 80 -r -x /opt/exports/exports.db

```

The `sqlite_web` interface can be queried as shown below

![query](https://github.com/Mr-Un1k0d3r/WindowsDllsExport/raw/main/query.png)

# JSON Format

A json file is also available `exports.json`

# Credit

Mr.Un1k0d3r RingZer0 Team