diff --git a/payloads/library/prank/Win_PoSH_DesktopBunny/DesktopBunny.ps1 b/payloads/library/prank/Win_PoSH_DesktopBunny/DesktopBunny.ps1 new file mode 100644 index 00000000..d8f7bafa --- /dev/null +++ b/payloads/library/prank/Win_PoSH_DesktopBunny/DesktopBunny.ps1 @@ -0,0 +1,267 @@ +[void] [System.Reflection.Assembly]::LoadWithPartialName("System.Windows.Forms"); +Add-Type -Assembly PresentationFramework +# xml of the wpf xaml code. this is the window to be shown +[xml]$xaml = @" + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +"@ +# the direction the bunny is traveling in +$goingRight = $true; +$count = 0; +# get the screen +$Screen = [System.Windows.Forms.Screen]::PrimaryScreen; +# create a reader for the xml +$reader = (New-Object System.Xml.XmlNodeReader $xaml) +# create the window from the reader +$window = [Windows.Markup.XamlReader]::Load($reader) +# find the ScaleTransform for the Canvas on the window +# this is used for fliping the image +$Scale = $window.FindName("BunnyScale"); +# find the TranslateTransform for the Canvas on the window +# this is used to see where the canvus is on the y axis +$Translate = $window.FindName("BunnyTranslate"); + +# add right click to window to close it +$handler = [Windows.Input.MouseButtonEventHandler]{ + $Timer.Stop(); + $window.Close(); + $_.Handled = $true; } +$window.Add_MouseRightButtonDown($handler); +# get task bar height +# Note: this is expecting is to be top or bottom +$taskbar = ($Screen.Bounds.Height - $Screen.WorkingArea.Height); +# set the window postion +$window.Left = $Screen.WorkingArea.Left; +$window.Top = $Screen.Bounds.Height - ($window.Height); +if ($Screen.WorkingArea.Top -eq 0) +{ + $window.Top = $window.Top - $taskbar; +} +# timer that is used to move the window +$Timer = New-Object System.Windows.Forms.Timer; +$Timer.Interval = 40; +$Timer.add_Tick( + { + # check y axis only move if the hight is less than 95 the animation in the wpf is from 100 to -200 + if($Translate.Y -lt 95) + { + if($goingRight) + { + # check to see if we are going of the edge + if(($window.Left + 1) -lt ($Screen.WorkingArea.Width - $window.Width)) + { + $window.Left = ($window.Left + 2) + } + else + { + # flip image + $Scale.ScaleX = -1; + #change direction + $script:goingRight = !$goingRight; + } + } + else + { + # check to see if we are going of the edge + if(($window.Left - 1) -gt 0) + { + $window.Left = ($window.Left - 2) + } + else + { + $Scale.ScaleX = 1; + $script:goingRight = !$goingRight; + } + } + } + } +); +$Timer.Start(); + +$window.ShowDialog() +$Timer.Dispose() \ No newline at end of file diff --git a/payloads/library/prank/Win_PoSH_DesktopBunny/demo.gif b/payloads/library/prank/Win_PoSH_DesktopBunny/demo.gif new file mode 100644 index 00000000..c60ba9ed Binary files /dev/null and b/payloads/library/prank/Win_PoSH_DesktopBunny/demo.gif differ diff --git a/payloads/library/prank/Win_PoSH_DesktopBunny/payload.txt b/payloads/library/prank/Win_PoSH_DesktopBunny/payload.txt new file mode 100644 index 00000000..82b96487 --- /dev/null +++ b/payloads/library/prank/Win_PoSH_DesktopBunny/payload.txt @@ -0,0 +1,11 @@ +REM TITLE DesktopBunny +REM AUTHOR Cribbit +REM DESCRIPTION Shows a Bunny that hops along the bottom of the screen +ATTACKMODE HID STORAGE +LED SETUP +GET SWITCH_POSITION +LED ATTACK +QUACK DELAY 3000 +RUN WIN "powershell -Noni -NoP -W h -EP Bypass iex((Get-Volume -FileSystemLabel 'BashBunny').DriveLetter+':\payloads\\$SWITCH_POSITION\DesktopBunny.ps1')" +QUACK ENTER +LED FINISH \ No newline at end of file diff --git a/payloads/library/prank/Win_PoSH_DesktopBunny/readme.md b/payloads/library/prank/Win_PoSH_DesktopBunny/readme.md new file mode 100644 index 00000000..cce2ffb4 --- /dev/null +++ b/payloads/library/prank/Win_PoSH_DesktopBunny/readme.md @@ -0,0 +1,30 @@ +# Desktop Bunny +- Author: Cribbit +- Version: 1.0 +- Target: Windows 10 (Powershell 5.1+) + .net wpf +- Category: Pranks +- Attackmode: HID & Storage + +## Change Log +| Version | Changes | +| ------- | --------------- | +| 1.0 | Initial release | + +## Description +Shows a bunny that move along the bottom of the screen. + +Creates a WPF window which is inviable apart form an image of a bunny. +Then the script moves the window along the bottom of the screen. +When it reaches the far side it flips the image and move the bunny in the opposite direction. + +## How to get ride of the bunny +Right Click on the bunny will close the window. + +![Demo](demo.gif) + +## Colours +| Status | Colour | Description | +| -------- | ----------------------------- | --------------------------- | +| SETUP | Magenta solid | Setting attack mode | +| ATTACK | Yellow single blink | Injecting Keystrokes | +| FINISHED | Green blink followed by SOLID | Injection finished | \ No newline at end of file