Bug Hunter Diary

{SWI.ClassId_q.ClassId clsid = new SWI.ClassId_q.ClassId();if (args.Length == 0 || (args[0].Equals(“/?") == true ||args[0].ToLower().StartsWith("-h") == true) ||args.Length < 1){Console.WriteLine("Usage: ClassID.exe \n");return;}}}}clsid.set_clsid(args[0]);System.Console.WriteLine(clsid.ToString());To compile and use the tool, I ran the following commands in acommand-prompt window:C:\Documents and Settings\tk\Desktop>csc /warn:0 /nologo ClassId.csC:\Documents and Settings\tk\Desktop>ClassId.exe {32E26FD9-F435-4A20-A561-35D4B987CFDC}Clsid: {32E26FD9-F435-4A20-A561-35D4B987CFDC}Progid: WebexUCFObject.WebexUCFObject.1Binary Path: C:\Program Files\WebEx\WebEx\824\atucfobj.dllImplements IObjectSafety: TrueSafe For Initialization (IObjectSafety): TrueSafe For Scripting (IObjectSafety): TrueSafe For Initialization (Registry): FalseSafe For Scripting (Registry): FalseKillBitted: FalseThe output of the tool shows that the object was indeed markedas safe for initialization and safe for scripting using IObjectSafety.I then clicked the Select button in COMRaider to see a list ofthe public methods exported by the object with GUID {32E26FD9-F435-4A20-A561-35D4B987CFDC}. As illustrated in Figure 5-2, a method calledNewObject() is exported by the object and takes a string value as input.Figure 5-2: Public methods exported by the object with GUID {32E26FD9-F435-4A20-A561-35D4B987CFDC}.Browse and You’re Owned 73