Description
Generates a Windows Search Connector (.searchConnector-ms) file that triggers a UNC connection for NTLM hash capture.
Overview
Generates a Search Connector XML file that causes Windows Search to connect to an attacker-controlled UNC share when opened, capturing Net-NTLMv2 credentials.
Parameters
| Name | Type | Description |
|---|---|---|
| UncPath | string | Attacker UNC path (e.g. \\192.168.1.100\share). |
| DisplayName | string | Connector display name. Default: SharePoint. |