Reposted by bohopsHexacorn @hexacorn.bsky.social · 01/06/2025mscoree.dll, RunDll32ShimW lolbin www.hexacorn.com/blog/2025/05... 073
bohops @bohops.bsky.social · 25/03/2025[Blog] This ended up being a great applied research project with my co-worker Dylan Tran on weaponizing a technique for fileless DCOM lateral movement based on the original work of James Forshaw. Defensive recommendations provided. - Blog: ibm.com/think/news/f... - PoC: github.com/xforcered/Fo...ibm.comFileless lateral movement with trapped COM objects | IBMNew research from IBM X-Force Red has led to the development of a proof-of-concept fileless lateral movement technique by abusing trapped Component Object Model (COM) objects. Get the details. 01511
Reposted by bohopsChris Thompson @retbandit.bsky.social · 19/03/2025I am excited to announce the first conference dedicated to the offensive use of AI in security! Request an invite at offensiveaicon.com. Co-organized by RemoteThreat, Dreadnode, & DEVSEC. 173
Reposted by bohopsClément Labro @itm4n.bsky.social · 19/02/2025In this blog post, I explain how I was able to create a PowerShell console in C/C++, and disable all its security features (AMSI, logging, transcription, execution policy, CLM) in doing so. 💪 👉 blog.scrt.ch/2025/02/18/r... 24319
Reposted by bohopsJames Forshaw @tiraniddo.dev · 30/01/2025New blog post on the abuse of the IDispatch COM interface to get unexpected objects loaded into a process. Demoed by using this to get arbitrary code execution in a PPL process. googleprojectzero.blogspot.com/2025/01/wind...googleprojectzero.blogspot.comWindows Bug Class: Accessing Trapped COM Objects with IDispatchPosted by James Forshaw, Google Project Zero Object orientated remoting technologies such as DCOM and .NET Remoting make it very easy ... 26541
Reposted by bohopsBrett Hawkins @h4wkst3r.bsky.social · 12/01/2025You can find our @shmoocon.bsky.social presentation slides at the below GitHub repo. Thanks again to all that attended. Also, thank you to the conference organizers for putting on a great con and having us! #shmoocon github.com/h4wkst3r/Con...github.com 11612
