Skip to content
ProjectMerai

Offensive-security research

The still point in
offensive security.

ProjectMerai is an offensive-security outfit. We take apart the systems people rely on and understand them to the bottom. Rigorous, exacting, and open by default.

Read the researchWhat we build

Flagship tool

DLLHijackHunter

black hat®· SecTor ’26black hat®· Europe ’26

Automated discovery, validation, and confirmation of DLL hijacking paths on Windows. Validation-driven by design: its verdict is confirmed, not suspected.

language
C# / .NET 8.0
license
MIT
stars
401 ★
Star on GitHubWhat it does

  • Canary confirmation

    Plants a harmless test DLL and proves it loads, eliminating the false positives that Robber, DLLSpy and WinPEAS leave you to triage by hand.

  • Multi-phase pipeline

    Discovery → Filtration → Canary Confirmation → Scoring. Confirmation is the gate: nothing is reported until it is proven exploitable.

  • Five scan profiles

    Aggressive, Strict, Safe, Redteam and UAC-bypass, spanning read-only recon through operational realism across an integrity boundary.

  • Reports that travel

    Console, JSON and HTML output, ready to drop straight into an assessment or a CI pipeline.

Research

The work, written down

Long-form vulnerability research, methodology, and tool internals. Written to be read.

All research
CVE8 min read

Five Critical RCEs in Dokploy: one bad habit, five open doors

Five CVSS 9.9 command-injection bugs in Dokploy, the self-hosted PaaS. Same mistake, five different features, five authenticated paths to running whatever you want on the box.

Read
Explainer4 min read

DLL Hijacking Explained to a 10yr Old

How the Windows loader actually resolves a DLL: LdrLoadDll, the KnownDLLs check, and the search order, and exactly where in that sequence a hijack becomes possible.

Read