github.comrepoartemy-ccrsky/COM-Jungle
COM-Jungle is a GitHub repository of offensive security research notes on Windows COM (Component Object Model), written by Artemy Tsetsersky in 2026. Notes are ordered by tactic: how COM works, execution, trust boundaries and privilege escalation, lateral movement via DCOM, persistence, initial access, finding new classes, and detection and hardening. It advises recording build, bitness, token and session before generalising a CLSID result, and says detections should key on registration, load and process context rather than a single CLSID.
TL;DR Maps Windows COM as an attack surface across execution, privilege escalation, lateral movement, persistence and initial access, with detection guidance.
Organisations named here
- Artemy Tsetsersky
- CLSID
- CoCreateInstance
- DCOM
Technologies named here
- Windows
Techniques named here
- COM execution
- Persistence
- Initial Access
- Defense evasion through COM
- Research into finding new exploitable COM classes
Related in Offensive Security
huntress.comwriteupAI-Coded Malware | Analyzing Vibe-Coded AD Enumeration | Huntress
github.comrepoYesWeHack Claude Kit
huntress.comwriteupInside an Oracle Database SQL Injection Attack | Huntress
huntress.comwriteup