Create Windows shortcuts with Download & Execute
Configure the LNK file to download and execute a remote payload when launched.
HTTP/HTTPS URL of the payload to download
Environment variables like %TEMP% are supported
Optional PDF purchase order decoy file to open after execution
More reliable download method
Windows background download
Built-in Windows utility
For MSI packages
Alternative execution method
MOTW (Mark of the Web) is a security feature that tags files downloaded from the internet. This can trigger security warnings when executing files.
The LNK file will be embedded in a ZIP archive with a specially crafted structure that bypasses MOTW checks.
Uses NTFS alternate data streams to store the LNK file, which can bypass some MOTW implementations.
Embeds the LNK in an HTML Application (HTA) file which has different security constraints.
Version 2.4.0 | Last updated: June 2023
This tool is provided for educational and legitimate purposes only. The developers are not responsible for any misuse of this software. Always ensure you have proper authorization before creating or distributing shortcut files.