killchain-compendium/exploit/windows/payloads
..
windows_scripting_host.md