TW-D 5d4367787f

SanDisk Wireless Stick Exfiltration (#445) ...

Uses the "SanDisk Wireless Stick" for files exfiltration.
1) Avoids "PowerShell Script Block Logging".
2) Hide "PowerShell" window.
3) Deletes Wi-Fi connection profiles in automatic mode, each deletion causes a disconnection.
4) Adds the profile for the "SanDisk Connect Wireless Stick" in automatic mode.
5) Checks whether the Wi-Fi interface is connected to the "SanDisk" and whether the gateway can be reached, if not, automatically starts again.
6) Exfiltration of the files via the HTTP channel.

2021-12-21 17:24:09 -06:00

..

credentials

Original from scaery/ducked (#456)

2021-12-16 11:52:13 -06:00

execution

New Payload - SSH Server (#451)

2021-12-21 17:20:37 -06:00

exfiltration

SanDisk Wireless Stick Exfiltration (#445)

2021-12-21 17:24:09 -06:00

general

New Exfiltration Payload: Smart Data Thief (#453)

2021-12-21 17:11:50 -06:00

Incident_Response

Update and fix payloads (#277)

2017-10-25 11:10:17 +11:00

mobile

cleaned up directory structure to match payloads.hak5.org

2021-08-24 10:04:24 -05:00

phishing

Windows Powershell Local DNS Poisoning payload (#427)

2021-01-11 08:43:00 -08:00

prank

New Payload - Spinning Around (#452)

2021-12-21 17:17:12 -06:00

recon

Moved sFTP Directory Grabber payload to recon directory

2021-08-24 09:38:52 -05:00

remote_access

Updated ReverseBunny to version 1.2 (#475)

2021-12-06 20:08:42 +00:00