> Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network. [NIST Page](https://nvd.nist.gov/vuln/detail/CVE-2025-24071)

The `CVE-2025-24071.sh` script creates a malicious zip file that contains a `.library-ms` pointing to a share on another (possible attacker's) computer that leads to NTLM hash leak when the zip file is extracted.

Usage:
```
chmod +x CVE-2025-24071.sh
./CVE-2025-24071.sh <IP>
```
This zip file can then be delivered to a Windows machine.