New mshta codes (inline execution) from MSHTA Console by Privateloader

hacxx · 02-24-2020, 09:28 PM

Runs cmd.exe hidden from the user

Code:
mshta "javascript:document.write('<html><script language=\"VBScript\">Set objShell = CreateObject(\"WScript.Shell\") : objShell.Run chr(34)&\"cmd.exe\"&chr(34)&\"/cpause\", 1, True</script></html>');close()"

Runs cmd.exe visible for the user

Code:
mshta "javascript:document.write('<html><script language=\x22VBScript\x22>Set objShell = CreateObject(\x22WScript.Shell\x22) : objShell.Run \x22cmd.exe /ccalc.exe\x22, 0, True</script></html>');close()"

Runs cmd.exe minimized from the user

Code:
mshta.exe vbscript:CreateObject("WScript.Shell").Run("cmd /c calc.exe",0)(Window.Close)

From MSHTA Console by Privateloader