How to prevent DLL Hijacking

koala

Active Member
You probably mean OBS injecting its DLL into your app/game. OBS does this for reliable game (directx) capture. It intercepts some directx calls to get notified of every frame rendered, and access to the frame buffer, so it can capture it fine. To avoid this, don't use game capture but window capture or display capture.

If you're a developer, consider adding a signature check to your dll recognition. If the dll that is injected is signed by the developer of OBS, allow it, otherwise reject it. There are also cheat prevention systems for games that go further. They add checksum checks of allowed injectable dlls to their engine only after they verify it isn't possible to exploit with the help of this dll. OBS Studio is a widely recognized valid screen/game recorder, you will find almost all cheat prevention systems explicitly allow OBS to capture their game. Only very few refuse it - these systems refuse every injection by principle with not a single exception.
 
Top