---
id: 6083
title: "Abusing COM objects"
source_domain: 0xpat.github.io
source_url: "https://0xpat.github.io/Abusing_COM_Objects/"
published_at: "2020-03-10T00:00:00Z"
tags: ["windows", "red-team", "enumeration", "code-execution", "com-objects", "vba-macros"]
phying_url: "https://phying.com/item/6083"
lang: en
---

# Abusing COM objects

## Summary

Finding COM objects that allow local code execution: enumerating CLSIDs, instantiating every class, and grepping 2M lines of methods for Execute/Create/Run primitives—abuse red teams reach via macros.

## Intelligence Metadata

- **Sources:** 0xpat.github.io
- **Published:** 2020-03-10T00:00:00Z
- **Original:** https://0xpat.github.io/Abusing_COM_Objects/
- **Phying News:** https://phying.com/item/6083