Winrm.md

Here, we can use Winrm.vbs to hijack COM by making "Scripting.Dictionary" invokes COM file in registry, Scripting.Dictionary is often refers to ProgID.

Instructions:

C:\>reg import "file.reg"
The operation completed successfully.

C:\>start C:\Windows\System32\winrm.vbs
Or 
C:\> start C:\Windows\System32\winrm.cmd

C:\>

Author

• Matt Nelson