[Josepxyz]

Açıl susam açıl susam gxc

[G1ld3d]

Thanks for sharing. Gonna enjoy giving this one a try.

Windows Explorer automatically initiates an SMB authentication request when a .library-ms file is extracted from a .rar archive, leading to NTLM hash disclosure. The user does not need to open or execute the file—simply extracting it is enough to trigger the leak.

usage:

>>python poc.py

>>enter file name: your file name

>>enter IP: attacker IP

Link:

[brMan]

let me check this one

[rainsec]

lets see whats in here