Avoid doing this to MS binaries. EDR watches for that.

HijackLibs

Apps vulnerable to hijacking

Netsh is a built in Windows utility that allows you to modify network configuration  It also allows you to load external DLLs – Requires the InitHelperDll entry point to exist

  1. run netsh add helper $PathToYourDll OR if you want to avoid cmdline args
  2. Modify HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NetSh just add a value
  3. run netsh

https://github.com/Sh0ckFR/DLLirant

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

Exploiting DLL Hijacking by DLL Proxying Super Easily - Miscellaneous | ReposHub