Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/slyd0g/LNKMod
C# project to create or modify existing LNKs
https://github.com/slyd0g/LNKMod
Last synced: 21 days ago
JSON representation
C# project to create or modify existing LNKs
- Host: GitHub
- URL: https://github.com/slyd0g/LNKMod
- Owner: slyd0g
- Created: 2020-08-21T04:56:44.000Z (over 4 years ago)
- Default Branch: master
- Last Pushed: 2022-10-18T16:47:55.000Z (about 2 years ago)
- Last Synced: 2024-08-05T17:24:16.239Z (4 months ago)
- Language: C#
- Size: 11.7 KB
- Stars: 52
- Watchers: 4
- Forks: 15
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
- awesome-hacking-lists - slyd0g/LNKMod - C# project to create or modify existing LNKs (C# #)
README
# LNKMod
## Output File Names
- ```-modify``` will update the specified .LNK
- ```-create``` will create ```payload.lnk``` in the current directory unless a custom path is specified using ```-outputpath```
## Usage / Test Cases
- Modify (will modify .LNK in current directory, only place one!)
- Modify path to executable, no arguments
- ```.\LNKMod.exe -modify -path "C:\Windows\system32\calc.exe"```
- Modify path to executable and arguments
- ```.\LNKMod.exe -modify -path "C:\Windows\system32\cmd.exe" -args "/c notepad.exe"```
- Create
- Create Test.lnk in the parent directory with path to executable, no arguments, and path to icon
- ```.\LNKMod.exe -create -outputpath ..\Test.lnk -path "C:\Windows\system32\calc.exe" -icopath "C:\Users\John\AppData\Local\Microsoft\OneDrive\OneDrive.exe"```
- Create payload.lnk in the current directory with path to executable, arguments, and path to icon
- ```.\LNKMod.exe -create -path "C:\Windows\system32\cmd.exe" -args "/c calc.exe" -icopath "C:\Users\John\AppData\Local\Microsoft\OneDrive\OneDrive.exe"```
- Sets access/write time to current time and creation time to a (reasonable) random time
- Dump metadata for a specified .LNK
- ```.\LNKMod.exe -dump "C:\Users\John\source\repos\LNKMod\LNKMod\bin\Release\payload.lnk"```
- Dump metadata for a specified .LNK in JSON format
- ```.\LNKMod.exe -dumpjson "C:\Users\John\source\repos\LNKMod\LNKMod\bin\Release\payload.lnk"```
## Potentially Dangerous Metadata
- CreationTime
- AccessTime
- WriteTime
- DriveSerialNumber
- KnownFolderID (GUID can be converted to a string can leak usernames)
- MachineID (NetBIOS name)
## References
- https://github.com/securifybv/ShellLink
- https://github.com/JamesNK/Newtonsoft.Json