> For the complete documentation index, see [llms.txt](https://wbglil.gitbook.io/cobalt-strike/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-yuan-li-jie-shao/beacon-dll-hollowing.md).

# Beacon dll Hollowing

DLL Hollowing（DLL镂空）这个东西其实和Process Hollowing基本一样所以没太多可写的，简单写两句概括一下。

首先调用Win API load一个系统的dll然后覆盖.text段内存

github:<https://github.com/forrest-orr/phantom-dll-hollower-poc>(可以自己看看这个代码)