@H31D1 said:
I thought because I could copy the dll from the Share to the user’s desktop, that everything was working, but when I run the dns tool, I am not seeing the connection in my server.
In addition to what @VbScrub has said, if you arent seeing the initial request on your server, the chances are you arent sending the payload.
Key things are how you call it and how you map the path to your payload via server and in the command.
Once you see the payload sent, you need to be pretty quick with the stop/start. I found it frustrating because it can take a while for the stop to work, so you never know if your start will be a start on your attack or someone else’s 