DLLSpy

DLLSpy is a DLL hijacking detection tool designed for Windows environments that identifies vulnerabilities in running processes and services by scanning their binaries for potential hijacking threats. It features three modes of operation: dynamic scanning of loaded modules, static search for DLL references in binaries, and recursive scanning of DLLs to uncover further hijack potential. The tool requires administrative privileges for comprehensive scanning and outputs results in CSV format by default.