Windows Scripting Host (WSH)
- A sample payload
1 2
Set shell = WScript.CreateObject("Wscript.Shell") shell.Run("C:\Windows\System32\calc.exe " & WScript.ScriptFullName),0,True
- To run the payload from the CMD
1
c:\Windows\System32>wscript "c:\Users\thm\Desktop\payload.vbs"
1
c:\Windows\System32>cscript.exe "c:\Users\thm\Desktop\payload.vbs"
Run vbs if it’s blocked by renaming the file to .txt
1
c:\Windows\System32>wscript /e:VBScript "c:\Users\thm\Desktop\payload.txt"