kevinjclark/invoke-linksprayPowershell script to create malicious SMB or WebDAV links to steal NTLM authentication
Powershell script to create malicious SMB or WebDAV links to steal NTLM authentication. Takes UNC or local folder paths from a file specified by the -ShareList parameter. Optionally, -Depth can be used to specify how many folders to recurse when creating URL files. Also supports a -RestoreFile parameter to clean up all files after you're done.
A typical run of the program -- Creating URL files
Hashes collected from the previous command in Responder
Restoring and cleaning up all links
