Windows Defender Evasive JS.Net and HTA

Generate an HTA that writes and compiles a JScript.NET file containing shellcode on the target machine. The compiled EXE executes the payload via dynamic P/Invoke VirtualAlloc/CreateThread. RC4 or HTTPS payloads are recommended for best results against Defender. !/usr/bin/env python3 -- coding:...