This definition might sound a little bit convoluted, but things are going to be clearer once we get hands-on. The interfaces of COM objects are these functions sets, being these interfaces strongly typed by their GUID (Global Unique Identifiers). A COM object is made up of data and functions that manipulate the data, where the access of this data is achieved through one or more sets of related functions.

It is an interface technology that allows reusing objects with no knowledge of their internal implementation. Component Object Model OverviewĬomponent Object Model (COM) is an object-oriented system meant to create binary software components that can interact with other objects. The attack we are demonstrating now only works when it is executed with an integrity level not higher than Medium, therefore, executing this attack within the context of a privileged system account (e.g. In this blog post you will also be able to learn more about our “Managed Privileges” feature, which allows you to specify a user account to be used when executing assessments, so any system interaction will be performed with the privileges of the given user.

Our intention is to provide information about security threats with enough technical data to satisfy those of you that are curious and want to understand the inner workings of the threat techniques we implement. Welcome to another blog post with information about the scenarios we write for our platform, this time it’s about the “Component Object Model Hijacking” attack that we can find in the MITRE ATT&CK matrix. Our intention is to provide information about security threats with enough technical data to satisfy those of… Read More Welcome to another blog post with information about the scenarios we write for our platform, this time it’s about the “Component Object Model Hijacking” attack that we can find in the MITRE ATT&CK matrix. TTPs Component Object Model Hijacking Published March 26, 2020

Unhackme inprocserver32 hijacking