how can i bypass this warning screen
-
XSS.stack #1 – первый литературный журнал от юзеров форума
lnk warning sreen
- Автор темы seal
- Дата начала
zone id
- Автор темы
- Добавить закладку
- #3
what do u mean bro
lnk is popularly used for spreading and its being well known to security.
use a newer spreading alternative method
use a newer spreading alternative method
So if .lnk is also dead, what remains? Office macros were good back in the day until Microsoft pulled the plug on them, .lnk and .iso + .lnk were crazy strong in 2022 and 2023 but looks like they are also dead now. The only other method which comes to mind that can be used for phishing/disguising is an .exe signed with an EV certificate. But those are pricey and go bad quick.
there are methods, not just cheap for everyone.
even .iso files got this dumbass warning now smh
if you too selfish just say that
Use. Vhd
you can use .reg file with startup key maybe but is need wait victim restart the pc
was it? i supposed to experiment with it back in 2019
Stuxnet used .lnk, its ancient technique and known forever by vendors and its a core component of windows that is impossible to block if you know how it rly work. This person most likely bought an lnk builder from someone who not knows how lnk file format works and got scammed.
how can i bypass this warning screen
can I see the contents of this .lnk file command line arguments? (target should start with C:\Windows\ and call entrypoint of MS component) I tried rn on a fresh wserv 2025 RDP it has no warnings and its more locked down than any other MS OS and I launched calc and cobalt beacon w/ several MS components. no warning. LNK is not good for spamming google/bing ads bc its literally unecessary, if thats what u wnna do, U need EV cert and thousands of aged domains and slave to grind overdrafts for getting u millions of adspends. lnk is best for targeted spearphish. I can make vid of pop calc if u want
.reg exploit is one if not the most stable ( for windows defender only tho )
wdym? .reg to run cmd that will download and run payload as .exe?
He means the one he's selling))))
There are lots of interesting registry tricks if you dig around. Check https://github.com/trustedsec/specula for an example
also .lnk is blocked by gmail, and zip with lnk is also get's blocked in gm
There is still a way, but it requires a specific setup of the files you send to phish
basically, payload runs in windows registry.