Windows Tooling Updates: OleView.NET
ID: 60895661-c090-504d-a9b3-311cffcef459
STIX ID: report--60895661-c090-504d-a9b3-311cffcef459
Feed Name: Google Project Zero
James Forshaw (Google Project Zero) introduces OleView.NET v1.16 enhancements for COM/DCOM research: it parses and consolidates interface metadata (known interfaces, GAC, type libraries, WinRT, and extracted proxies), formats them as pseudo C#/MIDL “source,” supports proxy name editing/caching, and dynamically generates RPC clients from COM proxies to safely invoke methods via IRpcChannelBuffer/NdrProxyInitialize through both GUI and PowerShell—streamlining enumeration and testing of Windows COM attack surface.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.