Open needAfuture opened 4 years ago
rundll32 js code will get killed by many sponsers,and it comes the same using mshta execute remote js code,but it'll do when the payload land at local disk, use mshta execute hta will do fine
That sounds good. I'll do more tests when I'm not busy.
rundll32 js code will get killed by many sponsers,and it comes the same using mshta execute remote js code,but it'll do when the payload land at local disk, use mshta execute hta will do fine