pentesting .hta files

These are two simple HTML applications for running commands in a locked down environment. For more information checkout the blog post https://medium.com/tsscyber/pentesting-and-hta-bypassing-powershell-constrained-language-mode-53a42856c997

exec.hta

Runs commands using WScript.Shell

powershell.hta

Runs powershell commands taking advantage of csc.exe and InstallUtil.exe