Files
bashbunny-payloads/payloads/library/prank/Win_PoSH_ReplaceCursor/ps.ps1
cribb-it e1700bdc91 New payload - Replace Cursor (#437)
* New payload - Replace Cursor

* Added Cursor - follow the white rabbit

* Update Readme
2021-12-21 17:31:08 -06:00

15 lines
563 B
PowerShell

# Copies the bunny ani file to the users profile.
$p=(gwmi win32_volume -f 'label=''BashBunny''').Name+'payloads\switch1\b.ani'
$f= $Env:USERPROFILE+'\b.ani'
if (Test-Path $p)
{
cp $p $f
}
else
{
cp ($p -replace "1", "2") $f
}
# Set the registory value of Arrow to the new cursor
sp 'HKCU:Control Panel\Cursors' Arrow '%USERPROFILE%\b.ani';
# Tell the system to update the displayed cursor
(Add-Type -Name c -Pass -M '[DllImport("user32.dll")] public static extern bool SystemParametersInfo(int A,int b,int c,int d);')::SystemParametersInfo(87,0,0,3)