From 5ccaa5562ed8ed8ce6328e2328a0582fe59c64fe Mon Sep 17 00:00:00 2001
From: cribb-it <24548670+cribb-it@users.noreply.github.com>
Date: Mon, 13 Jul 2020 22:54:57 +0100
Subject: [PATCH] Add new prank payload (#419)

* Add files via upload

* Update readme.md

* Update payload.txt

* Update readme.md

* Update readme.md

* Update readme.md

* Update readme.md

* Update readme.md

* Add files via upload

* Update readme.md

* Update readme.md
---
 .../payload.txt                               | 22 +++++++++++++++++
 .../readme.md                                 | 24 +++++++++++++++++++
 2 files changed, 46 insertions(+)
 create mode 100644 payloads/library/prank/WIN_powershell_ProgressBar-and-Popup/payload.txt
 create mode 100644 payloads/library/prank/WIN_powershell_ProgressBar-and-Popup/readme.md

diff --git a/payloads/library/prank/WIN_powershell_ProgressBar-and-Popup/payload.txt b/payloads/library/prank/WIN_powershell_ProgressBar-and-Popup/payload.txt
new file mode 100644
index 00000000..840bb1fb
--- /dev/null
+++ b/payloads/library/prank/WIN_powershell_ProgressBar-and-Popup/payload.txt
@@ -0,0 +1,22 @@
+# Title:        Progress bar and Popups
+# Description:  Opens PowerShell show a progress bar telling the user it's installing a virus. After that uses text-to-speech, then shows a few error messages.
+# Author:       Cribbit
+# Version:      1.0
+# Category:     Prank
+# Target:       Windows 10 (Powershell)
+# Attackmodes:	HID	
+
+LED SETUP
+
+ATTACKMODE HID VID_0X05AC PID_0X021E
+
+LED ATTACK
+
+Q DELAY 200
+RUN WIN "powershell"
+Q DELAY 100
+Q STRING "cls;Add-Type -AN PresentationFramework;\$t=101;\$i=0;for(\$i=0;\$i -lt \$t;\$i++){Write-Progress -A 'Installing Virus' -Status \"\$i% Complete\" -PercentComplete \$i;sleep -m 25;}\$s=New-Object -ComObject SAPI.SPVoice;\$s.Speak('Oh No what is happening to me');\$m=[System.Windows.MessageBox];\$e='Error';\$m::Show('Press any key to continue or any other key to quit',\$e, 'Ok', \$e);\$m::Show('Smash forehead on keyboard to continue',\$e, 'Ok', \$e);\$m::Show('Breakfast.sys halted - Cereal port not responding',\$e, 'Ok', \$e);\$m::Show('User error - Replace user',\$e, 'Ok', \$e);\$m::Show('Enter any 11 digit prime number to continue',\$e, 'Ok', \$e);\$m::Show('Close your eyes and press escape tree times',\$e, 'Ok', \$e);\$m::Show('Press Ctrl + Alt + Del for IQ test',\$e, 'Ok', \$e);\$m::Show('Press any key except.. no, No, NO, NOT THAT ONE!',\$e, 'Ok', \$e);\$m::Show('Runtime Error 399461 - Incompetent User',\$e, 'Ok', \$e);\$m::Show('Your hard drive has been scanned and all stolen software titles have been deleted. The police are on their way',\$e, 'Ok', \$e);\$m::Show('Bad command or file name - Go stand in the corner',\$e, 'Ok', \$e);\$m::Show('Problem caused by defective input device located in chair',\$e, 'Ok', \$e);\$s.Speak('Oh I''m ok');exit"
+Q DELAY 100
+Q ENTER
+
+LED FINISH
diff --git a/payloads/library/prank/WIN_powershell_ProgressBar-and-Popup/readme.md b/payloads/library/prank/WIN_powershell_ProgressBar-and-Popup/readme.md
new file mode 100644
index 00000000..7ebf07d4
--- /dev/null
+++ b/payloads/library/prank/WIN_powershell_ProgressBar-and-Popup/readme.md
@@ -0,0 +1,24 @@
+# Progress bar and Popup
+* Author: Cribbit 
+* Version: 1.0
+* Target: Windows 10 (Powershell)
+* Category: pranks
+* Attackmode: HID
+
+## Change Log
+| Version | Changes                       |
+| ------- | ------------------------------|
+| 1.0     | Initial release               |
+
+## Description
+Uses PowerShell to show a progress bar telling the user it's installing a virus. After that uses text-to-speech, then shows a few silly error messages.
+
+## Configuration
+May need to change the text-to-speech to `Add-Type -AN System.speech;$s=New-Object System.Speech.Synthesis.SpeechSynthesizer;`
+
+## Colors
+| Status    | Color                         | Description                                      |
+| --------- | ------------------------------| ------------------------------------------------ |
+| SETUP     | Magenta solid                 | Setting attack mode                              | 
+| ATTACK    | Yellow single blink           | Injecting Powershell script                      | 
+| FINISH    | Green blink followed by SOLID | Script is finished                               |