42,281 blogs · 5,361,753 posts Claim your blog

Record · corpus.blog/posts/01a08770-3405-7219-ba7b-4499deb51c16

Fileless lateral movement with trapped COM objects

dtsec.us · published 25 March 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at dtsec.us Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 15
Words captured: 1,636

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://x.com/bohops

x.com

https://www.ibm.com/think/news/fileless-lateral-movement-trapped-com-objects

ibm.com

https://x.com/tiraniddo

x.com

https://googleprojectzero.blogspot.com/2025/01/windows-bug-class-accessing-trapped-com.html

googleprojectzero.blogspot.com

https://x.com/T3nb3w/

x.com

https://github.com/T3nb3w/ComDotNetExploit

github.com

https://learn.microsoft.com/us-en/previous-versions/office/troubleshoot/office-developer/binding-type-available-to-automation-clients

learn.microsoft.com

Abusing the COM Registry Structure (Part 2): Hijacking & Loading Techniques Read at the source ↗

https://support.microsoft.com/us-en/topic/marshaling-of-reflection-types-may-not-work-over-dcom-after-you-install-a-security-update-from-security-bulletin-ms14-009-b3ae0bd6-fb65-4e75-b399-0add119cc16f

support.microsoft.com

https://github.com/tyranid/IE11SandboxEscapes/blob/master/CVE-2014-0257/CVE-2014-0257.cpp

github.com

https://x.com/SBousseaden/status/1896527307130724759

x.com

https://x.com/SBousseaden

x.com

https://github.com/xforcered/ForsHops

github.com

https://x.com/djhohnstein

x.com

https://x.com/sanjivkawa

x.com