不安全,但很搞笑
<script>
var shell = new ActiveXObject("WScript.shell");
shell.run("program.exe", 1, true);
</script>