Description
Generates a Windows Library (.library-ms) file that triggers a UNC connection for NTLM hash capture.
Overview
Generates a Windows Library file that causes Explorer to connect to an attacker-controlled UNC share when opened, capturing Net-NTLMv2 credentials.
Parameters
| Name | Type | Description |
|---|---|---|
| UncPath | string | Attacker UNC path (e.g. \\192.168.1.100\share). |
| DisplayName | string | Library display name. Default: Documents. |