rapid7/metasploit-framework — pull request #2299 by Meatballs1 (2013-08-28 21:33:46+00:00)
Title: Update IE unsafe scripting module

This module removes the requirement for ADODB.Stream which is blocked by default even when unsafe scripting methods are allowed. Instead we just use the VBS to write the EXE for us (we use to create VBS anyway).

Have also added a technique to take advantage of Powershell to avoid dropping a file to the disk at all. Strangely even when IE is run in x64 mode, all tabs are x86 and WScript.Shell and Powershell are therefore SYSWOW64. We cant run x64 payloads in these Powershell instances but saves the user from having to guess (or recon) the correct architecture!