Project Zero
Follow
Windows Tooling Updates: OleView.NET
The blog post discusses improvements made to the OleView.NET tool, which is designed to discover the attack surface of Windows COM and find security vulnerabilities. The tool was presented at the Microsoft Bluehat conference in Redmond. It is available for installation from the PowerShell gallery and can be used to parse COM registration artifacts into an internal database. The database can be stored for future use and shared with the GUI for easier research. Security research in COM involves enumerating potential classes of interest, validating accessibility, and enumerating exposed interfaces.