它是一站式结构化资源，从 COM 基础知识到高级零日狩猎，包含 28 张图表、可运行的实验代码、每种技术的检测指南以及每个攻击章节末尾的可重复研究实验室方法。
[!WARNING] ⚠️ AI-generated slop ahead. These notes were generated by Kimi K3 Swarms and may contain inaccuracies, hallucinations, or outdated information. Treat them as a starting point for research—not as an authoritative reference. Verify all technical details before relying on them.
A complete, research-grade knowledge base on Windows COM (Component Object Model) offensive security, built for red teamers who start with little or no COM background and want to end up able to hunt for zero-days on their own.
Every chapter goes from "what is a CLSID" to "here is how to fuzz marshaled NDR buffers against a SYSTEM COM server" — with exact CLSIDs, registry paths, API signatures, runnable lab snippets, 28 purpose-built technical diagrams, per-technique detection guidance, and a Research Lab at the end of every attack category that turns the chapter into a repeatable hunting methodology.
Legal: This material is for authorized security testing, research, and defense only. Every technique here is published defensive knowledge drawn from the public research record (Project Zero, vendor advisories, conference talks, vendor blogs). Running any of it against systems you do not own or lack written authorization to test is illegal in most jurisdictions. You are responsible for your own lab.
Provenance: All facts, CLSIDs, CVEs, code snippets, and URLs in these chapters come from six cross-verified research briefs (kept in
research/). Anything the sources could not double-confirm is explicitly marked "(verify in lab)" or carries a confidence label. Nothing is invented.
Powered By 🤖 Kimi K3 Max Swarm
If you are new to COM (the "zero to hero" path):
Read 01 cover to cover first. It defines every term, walks the registry layout, activation, marshaling, apartments, monikers, and the security model. Then read the attack chapters in order — each one re-explains what it needs before going deep.
If you are an operator preparing for an engagement:
Jump straight to the attack chapter you need. Each technique follows a fixed template: mechanics → prerequisites table → proof of concept → OpSec & detection → mitigations. Check 07 (Detection Engineering) against your target's likely telemetry before choosing a technique.
**If you wa
Research notes on Windows Component Object Model (COM) attack surface for offensive security and vulnerability research. Covers COM hijacking, elevation of privilege, DCOM lateral movement, and persistence primitives with exploitation steps. Notes were generated by Kimi K3 Swarm may contain inaccuracies.
根据分类、Topic 和编程语言匹配的相似项目。
Harness Engineering is a methodology for improving coding agent outputs by carefully crafting the environment around them—providing curated context, tools, and executable constraints that encode an organization’s nonfunctional requirements and cumulative lessons.
A 28.9 million parameter language model runs on an $8 ESP32-S3 microcontroller entirely on-device, generating simple stories at about 9.5 tokens per second.
mimic captures traffic from any iOS or web app and automatically generates a Python client library that lets you call the app's API like a regular library.
