I have created an one second ducky payload its stupid simple use browser auto pwn by meatspolit to get a shell on any box but you can also use a beef hook I cant afford your tools so that is why it theoretical. Some please try it probably wont work but it a good concept.
run "your website"
enter
enter
alt f4