GhostLNK is a professional-grade Windows LNK (shortcut) file generator with advanced stealth capabilities. It converts remote URLs (Dropbox, VPS, etc.) into PowerShell commands, encodes them in Base64, and embeds them into legitimate-looking LNK files that bypass modern AV detection.
penetration-testing offensive-security red-team string-obfuscation security-research av-bypass lolbins living-off-the-land windows-shortcut phishing-simulation edr-evasion lnk-stomping malware-simulation fileless-execution lnk-generator powershell-evasion regsvr32-proxy conhost-proxy multi-stage-stager xor-encoding
-
Updated
Apr 22, 2026 - Python