How to Take Advantage of Weak NTFS Permissions

## Executive Summary: This report outlines a technique for abusing weak NTFS and share permissions to achieve credential capture and lateral escalation by writing malicious shortcuts or files to writable network locations (roaming profiles, folder redirection, user home directories). It describes discovery using PowerView and Invoke-ShareFinder, options for payload delivery (malicious macros or backdoored binaries), and the use of Metasploit's SMB capture module to collect NTLM challenge-response hashes via modified file:// links for subsequent offline cracking and privilege escalation.