corpus.blog
42,390 blogs · 5,361,753 posts Claim your blog
Record · corpus.blog/posts/01a0f941-4971-71cc-9e6b-15c7d09de31a

Abusing the COM Registry Structure (Part 2): Hijacking & Loading Techniques

Bohops · published 18 August 2018

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at bohops.com Wayback capture
1blogs citing
First cited
25 Mar 2025
Most recent
25 Mar 2025
Rank this month
not ranked
External links
18
Words captured
2,613

Cited by

Blog
In the post
Date
dtsec.us
Fileless lateral movement with trapped COM objects Read at the source ↗
25 Mar 2025

Links from this post

Link
Host
https://attack.mitre.org
attack.mitre.org
https://attack.mitre.org/wiki/Technique/T1122
attack.mitre.org
https://github.com/api0cradle/LOLBAS/blob/master/OSScripts/Payload/Slmgr_calc.sct
github.com
https://twitter.com/subtee
twitter.com
https://github.com/api0cradle/LOLBAS/blob/master/OSScripts/Payload/Slmgr.reg
github.com
https://docs.microsoft.com/en-us/sysinternals/
docs.microsoft.com
https://twitter.com/enigma0x3
twitter.com
https://twitter.com/subTee
twitter.com
https://github.com/enigma0x3/windows-operating-system-archaeology/blob/master/Persistence/TreatAsPersistence.reg
github.com
https://github.com/enigma0x3/windows-operating-system-archaeology
github.com
https://www.youtube.com/watch?v=dfMuzAZRGm4
youtube.com
https://twitter.com/tiraniddo
twitter.com
https://www.cybereason.com/blog/dcom-lateral-movement-techniques
cybereason.com
https://twitter.com/PhilipTsukerman
twitter.com
https://www.youtube.com/watch?v=xmbjRP5W-yk&feature=youtu.be
youtube.com
https://twitter.com/rbmaslen
twitter.com
https://github.com/nettitude/Invoke-PowerThIEf
github.com
https://twitter.com/bohops
twitter.com
Elsewhere on bohops.com (6)