COM-Hunter

COM-Hunter COMハイジャックのVOODOO 説明 COM-HunterはCOMハイジャックの永続化ツールです。 .NET版と、Cobalt Strikeと完全互換のBOF版の両方が利用できます。 以下のリストは利用可能なモードを説明しています。 検索モード : LocalServer32、InprocServer32、およびHKLMとHKCUの両方のレジストリエントリに基づいてCLSIDを検索します。 クラシック永続化モード : LocalServer32またはInprocServer32を使用して、古典的なCOMハイジャック永続化を実行します。 タスクスケジューラモード :...

SessionHop

SessionHop SessionHop es una herramienta en C que utiliza el objeto COM IHxHelpPaneServer, configurado para ejecutarse como Usuario Interactivo, con el fin de secuestrar sesiones de usuario específicas. Mediante la creación de un moniker de sesión y utilizando la interfaz Execute del objeto COM,...

WFH

Windows Feature Hunter WFH Windows Feature Hunter WFHは、動的インストルメンテーションツールキットであるFridaを使用して、Windows実行ファイル内の一般的な「脆弱性」または「機能」を潜在的に特定するための概念実証Pythonスクリプトです。WFHは現在、大規模に潜在的なDynamic Linked Library（DLL）サイドローディングおよびComponent Object Model（COM）ハイジャックの機会を自動的に識別する機能を備えています。 DLLサイドローディングは、Windows...

CVE-2026-66804

CVE-2026-66804: Elevación de Privilegios EoP en la Cámara Virtual Cross Device El problema, descubierto e informado de forma independiente, ahora se rastrea como CVE-2026-66804. MSRC confirmó el envío como duplicado de un informe anterior con la misma causa raíz subyacente en Windows Camera...

ContextMenuHijack

ContextMenuHijack L'idea originale che mi ha ispirato viene da @NinjaParanoid: ContextMenuHijack è una semplice tecnica di persistenza che utilizza il COM hijacking basato sul comportamento umano: quando fai clic con il tasto destro su un file/cartella in Esplora file per aprire il menu...

invoker

المستدعي Invoker أداة اختبار اختراق وتقييم مضاد للفيروسات. مُبنية باستخدام Visual Studio Community 2022 v17.5.4 64-bit وتم اختبارها على نظام Windows 10 Enterprise 64-bit. صُنعت لأغراض تعليمية. أتمنى أن تكون مفيدة! هذا المستودع بدأت تظهر له توقيعات معروفة وليس لدي وقت لرفع ملفات تنفيذية جديدة في ك...

Spartacus

!CAUTION Questo repository non è più mantenuto, visita https://github.com/sadreck/Spartacus per l'ultima versione. Spartacus DLL/COM Hijacking Toolkit Perché "Spartacus"? Se hai visto il film Spartacus del 1960, ricorderai la scena in cui i romani chiedono che Spartacus si arrenda. Nel momento in...

acCOMplice

acCOMplice شريكك في اختطاف COM المؤلف: David Tulis @kafkaesqu3 نظرة عامة يحتوي هذا المستودع على نماذج أكواد وإثباتات مفاهيم لاستكشاف اختطاف COM. اختطاف COM هو تقنية استغلال لاحقة على نظام Windows، ويمكن استخدامها لتحقيق الثبات persistence أو التهرب من الدفاع defense evasion. لمزيد من المعلومات حو...

Argamal: Malware hidden in hentai games

In April 2026, we discovered a new malware campaign targeting players of "hentai" games. Once launched, the infected games install a previously unknown malicious implant on the user's machine. After a few days, the implant downloads and executes a Trojan, resulting in full system compromise and...

Symantec Endpoint Protection Client < 14.3 RU8 Patch 3 / 14.3 RU9 Patch 2 / 14.3 RU10 Patch 1 Multiple Vulnerabilities (36774)

The version of Symantec Endpoint Protection SEP Client installed on the remote host is affected by a multiple vulnerabilities as referenced in the 36774 advisory. - Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a Elevation of Privile...

CVE-2025-13919

Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a COM Hijacking vulnerability, which is a type of issue whereby an attacker attempts to establish persistence and evade detection by hijacking COM references in the Windows Registry...

CVE-2025-13919

Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a COM Hijacking vulnerability, which is a type of issue whereby an attacker attempts to establish persistence and evade detection by hijacking COM references in the Windows Registry...

CVE-2025-13919

Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a COM Hijacking vulnerability, which is a type of issue whereby an attacker attempts to establish persistence and evade detection by hijacking COM references in the Windows Registry...

EUVD-2025-206456

Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a COM Hijacking vulnerability, which is a type of issue whereby an attacker attempts to establish persistence and evade detection by hijacking COM references in the Windows Registry...

CVE-2025-13919 Component Object Model (COM) Hijacking in Symantec Endpoint Protection Windows Client

Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a COM Hijacking vulnerability, which is a type of issue whereby an attacker attempts to establish persistence and evade detection by hijacking COM references in the Windows Registry...

CVE-2025-13919

The CVE-2025-13919 entry concerns Symantec Endpoint Protection Client vulnerabilities, specifically a COM Hijacking issue in Windows where references in the COM registry can be hijacked to establish persistence and evade detection. Affected software is SEP Client versions prior to 14.3 RU10 Patch...

PT-2026-5143

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions prior to 14.3 RU10 Patch 1 Symantec Endpoint Protection versions prior to 14.3 RU9 Patch 2 Symantec Endpoint Protection versions prior to 14.3 RU8 Patch 3 Description The software may be susceptible to a C...

EUVD-2024-54613

Malicious code in bioql PyPI...

EUVD-2024-47594

Malicious code in bioql PyPI...

CVE-2025-34090

The CVE-2025-34090 entries reveal a local security bypass in Google Chrome related to the AppBound cookie encryption mechanism. Root cause: insufficient validation of COM server paths during inter-process communication allows a low-privilege attacker to hijack the COM CLSID registration used by C...