Exploiting Perl on Windows with OLE COM.ppt

Roth Consulting Exploiting Perl on Windows with OLE/COM Exploiting Perl on Windows with OLE/COM Dave Roth (Roth Consulting) Exploiting Perl on Windows with OLE/COM Windows Shell Scripting Referred to as WSH (pronounced as wish) Comes with Windows 2000 and Windows ME Allows plug-able shells such as PerlScript, VB, JavaScript COM Objects A COM object is a set of functions and data Functions Called methods Perform an action Returns a result such as an numeric value, a string and array or another COM object Example Print() GetAddress() COM Objects Data Called properties Some properties are read/write so they can be both set and queried Some properties are read-only so they can only be queried Properties are really functions that are called get_PropertyName()/set_PropertyName() Properties can be a numeric value, a string, an array or another COM object Common example Count CurrentDate Font COM Collection Object Special type of COM object which represents a bunch of other COM objects COM Collection object is similar to a Perl array which contains a list of COM objects A collection object typically has a name which is the plural of the type of COM object it represents Fonts would represent a collection of Font COM objects Documents would represent a collection of Document COM objects Interfaces, interfaces, interfaces! COM defines interfaces into a program. Each interface has an unique interface id (IID) to identify it from other interfaces: {000209FF-0000-0000-C000-000000000046} Aka GUID, CLSID, UUID, ProgID Stored in Registry: HKEY_CLASSES_ROOT\CLSID In theory an IID is so unique that no two interfaces will ever have the same ID; regardless of vendor, program or platform. COM’s Affair With The Registry All COM interface info is stored in the Registry Example (MS Word 2000): HKEY_CLASSES_ROOT\Word.Application\CLSID Default = {000209FF-0000-0000-C000-000000000046} HKEY_CLASSES_ROOT\CLSID\{000209FF-0000-0000-C000-000000000046} Threading Models Single Threading Model Intr