diff --git a/OSLibraries/Shell32.md b/OSLibraries/Shell32.md index 14e8fd4..9b67a0f 100644 --- a/OSLibraries/Shell32.md +++ b/OSLibraries/Shell32.md @@ -5,17 +5,20 @@ ``` rundll32.exe shell32.dll,Control_RunDLL payload.dll -rundll32.exe shell32.dll,ShellExec_RunDLL beacon.exe +rundll32.exe shell32.dll,ShellExec_RunDLL beacon.exe + +rundll32.exe shell32.dll,OpenAs_RunDLL c:\temp\calc.hta ``` Acknowledgements: -* Pierre-Alexandre Braeken - @pabraeken (ShellExec_RunDLL) +* Pierre-Alexandre Braeken - @pabraeken (ShellExec_RunDLL + OpenAs_RunDLL) Code sample: * Resources: * https://twitter.com/pabraeken/status/991768766898941953 +* https://twitter.com/pabraeken/status/998625299976867840 Full path: ```