Initially, this technology was targeted at web developers as it was relatively similar to JS, and this fact drastically affected the syntax. VBScript is modeled on Visual Basic and has similar programming elements, such as conditional structures, loop structures, objects, and embedded functions (data types are slightly different to work with as all variables in VBScript have the variant type or one of its subtypes). Most of this high-level functionality can be accessed in the corresponding Microsoft Component Object Model (COM) objects. COM is a distributed system for creating interacting software components.
Here are some COM objects and the corresponding methods and properties that are often misused by attackers:
- WScript.Shell: This gives access to multiple system-wide operations, as follows:
- RegRead/RegDelete/RegWrite: These interact with the Windows registry to check the presence of certain software (such as an antivirus program), tamper with its functionality, delete...
