use COM Object hijacking to maintain persistence.(Hijack CAccPropServicesClass and MMDeviceEnumerator)
Switch branches/tags
Nothing to show
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Type Name Latest commit message Commit time
Failed to load latest commit information.
COM Object hijacking persistence.ps1


use COM Object hijacking to maintain persistence

This script allows you to use COM Object hijacking to maintain persistence.

Learn from:

Code by: 3gstudent@3gstudent

License: BSD 3-Clause

Support x86 and x64 system.

Redefined CAccPropServicesClass and MMDeviceEnumerator.

These two instances are used by a lot of applications, for example by the browser (by using the CoCreateInstance() function).

When you start iexplore.exe,it also starts calc.exe.