Download lnk File Using HTML Smuggling

[Lipshitz]

I'm wondering how it's possible to download a lnk file without zipping, it always ends up as "*.download" file when I test. If anyone can help I will really appreciate it. This is the logic of the program:

A) Create a Javascript Blob object, holding file’s raw data
B) If operating on IE – use msSaveOrOpenBlob
C) Else, create a dynamic HTML node
D) Invoke URL.createObjectURL() and store it in
E) Stores Blob-URL in .download property
F) Invokes created anchor tag to execute download feature

 

[Hunter-B]

Direct download of lnk-file in modern chromium-based browsers is difficult, from March 2024 Google connect to chromium new AI system to avoid users from phishing... All files with .bat/.vbs will be downloaded with .download extension. One of the ways - put our ps1 script to github for example and than put direct download link... maybe, the same way it will pass lnk