Nice,but the hta payload in your screencap,i remember no av picking up my cactustorch payloads either. Nextgen AV(like windows ATP) block your exploit when it

Nice,but the hta payload in your screencap,i remember no av picking up my cactustorch payloads either. Nextgen AV(like windows ATP) block your exploit when it tries to spawn a process like cmd.exe. Their starting to do ML on scripts too now. Keep it up though,maybe the next APT breach will use your script :)