SessionHop

SessionHop SessionHop è uno strumento C che utilizza l'oggetto COM IHxHelpPaneServer, configurato per essere eseguito come Utente interattivo, per dirottare sessioni utente specifiche. Creando un moniker di sessione e utilizzando l'interfaccia Execute dell'oggetto COM, gli operatori possono...

Spartacus

!CAUTION Este repositório não é mais mantido, visite https://github.com/sadreck/Spartacus para a versão mais recente. Spartacus - Toolkit de DLL/COM Hijacking Porquê "Spartacus"? Se viste o filme Spartacus de 1960, lembrar-te-ás da cena em que os romanos pedem que Spartacus se entregue. No moment...

WFH

Windows Feature Hunter WFH Windows Feature Hunter WFH ist ein Proof-of-Concept-Python-Skript, das Frida, ein dynamisches Instrumentierungs-Toolkit, verwendet, um bei der potenziellen Identifizierung von allgemeinen „Schwachstellen“ oder „Features“ in Windows-Ausführbaren zu helfen. WFH hat derzei...

COM-Hunter

COM-Hunter COM Hijacking VOODOO Beschreibung COM-Hunter ist ein COM-Hijacking-Persistenztool. Verfügbar sowohl in einer .NET-Version als auch in einer BOF-Variante, die vollständig mit Cobalt Strike kompatibel ist. Die folgende Liste erklärt die verfügbaren Modi: Suchmodus : Sucht nach CLSIDs...

CVE-2026-66804

CVE-2026-66804: EoP della fotocamera virtuale Cross Device Scoperto e segnalato in modo indipendente, il problema è ora tracciato come CVE-2026-66804. MSRC ha confermato che la segnalazione è un duplicato di un rapporto precedente con la stessa causa principale sottostante di Windows Camera...

ContextMenuHijack

ContextMenuHijack L'idea originale che mi ha ispirato viene da @NinjaParanoid: ContextMenuHijack è una semplice tecnica di persistenza che utilizza il COM hijacking basato sul comportamento umano: quando fai clic con il tasto destro su un file/cartella in Esplora file per aprire il menu...

invoker

Invoker Penetrationstest-Dienstprogramm und Antiviren-Bewertungstool. Erstellt mit Visual Studio Community 2022 v17.5.4 64-Bit und getestet unter Windows 10 Enterprise OS 64-Bit. Für Bildungszwecke erstellt. Ich hoffe, es wird helfen! Dieses Repository hat bekannte Signaturen und ich habe keine...

acCOMplice

acCOMplice Il tuo complice per il COM hijacking Autore: David Tulis @kafkaesqu3 Panoramica Questo repository contiene esempi di codice e proof-of-concept per esplorare il COM hijacking. Il COM hijacking è una tecnica di post-exploitation di Windows che può essere utilizzata per la persistenza o...

Argamal: Malware hidden in hentai games

In April 2026, we discovered a new malware campaign targeting players of "hentai" games. Once launched, the infected games install a previously unknown malicious implant on the user's machine. After a few days, the implant downloads and executes a Trojan, resulting in full system compromise and...

Symantec Endpoint Protection Client < 14.3 RU8 Patch 3 / 14.3 RU9 Patch 2 / 14.3 RU10 Patch 1 Multiple Vulnerabilities (36774)

The version of Symantec Endpoint Protection SEP Client installed on the remote host is affected by a multiple vulnerabilities as referenced in the 36774 advisory. - Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a Elevation of Privile...

CVE-2025-13919

Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a COM Hijacking vulnerability, which is a type of issue whereby an attacker attempts to establish persistence and evade detection by hijacking COM references in the Windows Registry...

CVE-2025-13919

Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a COM Hijacking vulnerability, which is a type of issue whereby an attacker attempts to establish persistence and evade detection by hijacking COM references in the Windows Registry...

CVE-2025-13919

Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a COM Hijacking vulnerability, which is a type of issue whereby an attacker attempts to establish persistence and evade detection by hijacking COM references in the Windows Registry...

EUVD-2025-206456

Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a COM Hijacking vulnerability, which is a type of issue whereby an attacker attempts to establish persistence and evade detection by hijacking COM references in the Windows Registry...

CVE-2025-13919 Component Object Model (COM) Hijacking in Symantec Endpoint Protection Windows Client

Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a COM Hijacking vulnerability, which is a type of issue whereby an attacker attempts to establish persistence and evade detection by hijacking COM references in the Windows Registry...

CVE-2025-13919

The CVE-2025-13919 entry concerns Symantec Endpoint Protection Client vulnerabilities, specifically a COM Hijacking issue in Windows where references in the COM registry can be hijacked to establish persistence and evade detection. Affected software is SEP Client versions prior to 14.3 RU10 Patch...

PT-2026-5143

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions prior to 14.3 RU10 Patch 1 Symantec Endpoint Protection versions prior to 14.3 RU9 Patch 2 Symantec Endpoint Protection versions prior to 14.3 RU8 Patch 3 Description The software may be susceptible to a C...

EUVD-2024-54613

Malicious code in bioql PyPI...

EUVD-2024-47594

Malicious code in bioql PyPI...

CVE-2025-34090

The CVE-2025-34090 entries reveal a local security bypass in Google Chrome related to the AppBound cookie encryption mechanism. Root cause: insufficient validation of COM server paths during inter-process communication allows a low-privilege attacker to hijack the COM CLSID registration used by C...