{"id":20068267,"url":"https://github.com/nickvourd/rocabella","last_synced_at":"2025-09-20T15:30:56.849Z","repository":{"id":261707701,"uuid":"780953277","full_name":"nickvourd/Rocabella","owner":"nickvourd","description":"Sniffing files generator","archived":false,"fork":false,"pushed_at":"2024-11-16T17:28:03.000Z","size":4575,"stargazers_count":49,"open_issues_count":0,"forks_count":7,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-01-11T09:46:59.428Z","etag":null,"topics":["go","golang","library-ms","lnk-files","microsoft","pentest","redteam","searchconnector-ms","shortcuts","sniffing","url-files","windows"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/nickvourd.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-04-02T13:27:56.000Z","updated_at":"2025-01-05T20:53:06.000Z","dependencies_parsed_at":"2024-11-08T01:30:45.486Z","dependency_job_id":"59d2cf58-7c7b-4913-9f57-15764ff08f2b","html_url":"https://github.com/nickvourd/Rocabella","commit_stats":null,"previous_names":["nickvourd/rocabella"],"tags_count":2,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nickvourd%2FRocabella","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nickvourd%2FRocabella/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nickvourd%2FRocabella/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nickvourd%2FRocabella/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nickvourd","download_url":"https://codeload.github.com/nickvourd/Rocabella/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":233672617,"owners_count":18712050,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["go","golang","library-ms","lnk-files","microsoft","pentest","redteam","searchconnector-ms","shortcuts","sniffing","url-files","windows"],"created_at":"2024-11-13T14:05:56.938Z","updated_at":"2025-09-20T15:30:56.843Z","avatar_url":"https://github.com/nickvourd.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Rocabella\n\nSniffing files generator.\n\n\u003cp align=\"center\"\u003e\n  \u003cimg width=\"350\" height=\"350\" src=\"/Pictures/Rocabella-Logo.png\"\u003e\u003cbr /\u003e\u003cbr /\u003e\n  \u003cimg alt=\"GitHub License\" src=\"https://img.shields.io/github/license/nickvourd/Rocabella?style=social\u0026logo=GitHub\u0026logoColor=purple\"\u003e\n  \u003cimg alt=\"GitHub Repo stars\" src=\"https://img.shields.io/github/stars/nickvourd/Rocabella?logoColor=yellow\"\u003e\u003cbr /\u003e\n  \u003cimg alt=\"GitHub forks\" src=\"https://img.shields.io/github/forks/nickvourd/Rocabella?logoColor=red\"\u003e\n  \u003cimg alt=\"GitHub watchers\" src=\"https://img.shields.io/github/watchers/nickvourd/Rocabella?logoColor=blue\"\u003e\n  \u003cimg alt=\"GitHub contributors\" src=\"https://img.shields.io/github/contributors/nickvourd/Rocabella?style=social\u0026logo=GitHub\u0026logoColor=green\"\u003e\n\u003c/p\u003e\n\n## Description\n\nRocabella is an open-source tool that generates sniffing files.\n\n![Static Badge](https://img.shields.io/badge/Golang-cyan?style=flat\u0026logoSize=auto)\n![Static Badge](https://img.shields.io/badge/Version-1.4%20(Gold%20Rose)-red?link=https%3A%2F%2Fgithub.com%2Fnickvourd%2FRocabella%2Freleases)\n\nIt supports a variety of sniffing file formats, including:\n\n- searchConnector-ms\n- library-ms\n- LNK shortcuts\n- URL shortcuts\n- SCF Shortcuts\n\nRocabella is written in Golang, a cross-platform language, enabling its use on both Windows and Linux systems.\n\n:warning: For Linux machines the module named `lnk`, it does not work!\n\nFor command-line usage and examples, please refer to our [Wiki](https://github.com/nickvourd/Rocabella/wiki).\n\n\u003e If you find any bugs, don’t hesitate to [report them](https://github.com/nickvourd/Rocabella/issues). Your feedback is valuable in improving the quality of this project!\n\n## Disclaimer\n\nThe author and contributors of this project are not liable for any illegal use of the tool. It is intended for educational purposes only. Users are responsible for ensuring lawful usage.\n\n## Table of Contents\n- [Rocabella](#rocabella)\n  - [Description](#description)\n  - [Disclaimer](#disclaimer)\n  - [Table of Contents](#table-of-contents)\n  - [Acknowledgement](#acknowledgement)\n  - [Installation](#installation)\n  - [Usage](#usage)\n  - [References](#references)\n \n## Acknowledgement\n\nSpecial thanks to my brothers [@S1ckB0y1337](https://twitter.com/S1ckB0y1337) and [@MikeAngelowtt](https://twitter.com/MikeAngelowtt), who provided invaluable assistance during the beta testing phase of the tool.\n\nRocabella was created with :heart: by [@nickvourd](https://twitter.com/nickvourd).\n\n## Installation\n\nYou can use the [precompiled binaries](https://github.com/nickvourd/Rocabella/releases), or you can manually install Rocabella by following the next steps:\n\n1) Clone the repository by executing the following command:\n\n```\ngit clone https://github.com/nickvourd/Rocabella.git\n```\n\n2) Once the repository is cloned, navigate into the Rocabella directory:\n\n```\ncd Rocabella\n```\n\n3) Install the third-party dependencies:\n\n```\ngo mod download\n```\n\n4) Build Rocabella with the following command:\n\n```\ngo build Rocabella\n```\n\n## Usage\n\n:information_source: Please refer to the [Rocabella Wiki](https://github.com/nickvourd/Rocabella/wiki) for detailed usage instructions and examples of commands.\n\n```\n8888888b.                            888               888 888\n888   Y88b                           888               888 888\n888    888                           888               888 888\n888   d88P .d88b.   .d8888b  8888b.  88888b.   .d88b.  888 888  8888b.\n8888888P\" d88\"\"88b d88P\"        \"88b 888 \"88b d8P  Y8b 888 888     \"88b\n888 T88b  888  888 888      .d888888 888  888 88888888 888 888 .d888888\n888  T88b Y88..88P Y88b.    888  888 888 d88P Y8b.     888 888 888  888\n888   T88b \"Y88P\"   \"Y8888P \"Y888888 88888P\"   \"Y8888  888 888 \"Y888888\n\nRocabella v1.4 - Sniffing files generator.\nRocabella is an open source tool licensed under MIT.\nWritten with \u003c3 by @nickvourd.\nPlease visit https://github/nickvourd/Rocabella for more...\n\nUsage:\n  Rocabella [flags]\n  Rocabella [command]\n\nAvailable Commands:\n  help        Help about any command\n  lib         library-ms file\n  lnk         lnk shortcut file\n  sc          searchConnector-ms file\n  scf         scf shortcut file\n  url         url shortcut file\n\nFlags:\n  -h, --help      help for Rocabella\n  -v, --version   Show Rocabella current version\n```\n\n## References\n\n- [Farming for Red Teams: Harvesting NetNTLM by MDSec](https://www.mdsec.co.uk/2021/02/farming-for-red-teams-harvesting-netntlm/)\n- [The Latest in Software Functionality Abuse: URL Internet Shortcut Files Abused to Deliver Malware by Cofense](https://cofense.com/blog/latest-software-functionality-abuse-url-internet-shortcut-files-abused-deliver-malware/)\n- [SearchConnector-ms by Filesec](https://filesec.io/searchConnector-ms)\n- [Library-ms by Filesec](https://filesec.io/library-ms)\n- [LNK by Filesec](https://filesec.io/lnk)\n- [URL by Filesec](https://filesec.io/url)\n- [Search Connector Description Schema Microsoft](https://learn.microsoft.com/en-us/windows/win32/search/search-sconn-desc-schema-entry)\n- [Library Description Schema Microsoft](https://learn.microsoft.com/en-us/windows/win32/shell/library-schema-entry)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnickvourd%2Frocabella","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fnickvourd%2Frocabella","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnickvourd%2Frocabella/lists"}