Microsoft Windows Shell LNK Code Execution
This module exploits a vulnerability in the handling of Windows Shortcut files (.LNK) that contain an icon resource pointing to a malicious DLL. This creates an SMB resource to provide the payload inside a DLL, and generates a LNK file which must be sent to the target.
Module Name
exploit/windows/smb/ms10_046_shortcut_icon_dllloader
Authors
- hdm <x [at] hdm.io>
- jduck <jduck [at] metasploit.com>
- B_H
References
Targets
- Automatic
Platforms
- windows
Reliability
Development
Module Options
To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':
msf > use exploit/windows/smb/ms10_046_shortcut_icon_dllloader
msf exploit(ms10_046_shortcut_icon_dllloader) > show targets
...targets...
msf exploit(ms10_046_shortcut_icon_dllloader) > set TARGET <target-id>
msf exploit(ms10_046_shortcut_icon_dllloader) > show options
...show and set options...
msf exploit(ms10_046_shortcut_icon_dllloader) > exploit