Cleanup: Powershell_TCP_Extractor: Update Payload Header

2019-07-05 08:41:35 +01:00 · 2019-07-05 08:41:35 +01:00 · 4ecfbf665e
parent f214a3adf9
commit 4ecfbf665e
1 changed files with 8 additions and 3 deletions
--- a/payloads/library/exfiltration/Powershell_TCP_Extractor/payload.txt
+++ b/payloads/library/exfiltration/Powershell_TCP_Extractor/payload.txt
@ -3,10 +3,15 @@
 # Title:         Powershell Extractor
 # Author:        $irLurk$alot
 # Version:       1.0
-# Target:        Windows
+# Targets:       Windows
+# Attack Modes:  HID, STORAGE
+# Description: Executes d.cmd from the selected switch folder of the Bash Bunny USB Disk partition,
+#              which in turn runs powershell script to copy move and extract data.
 #
-# Executes d.cmd from the selected switch folder of the Bash Bunny USB Disk partition,
-# which in turn runs powershell script to copy move and extract data.
+# LEDS:
+# Magenta: Setting Up
+# Yellow Blink: Executing Powershell
+# Green: Finished

 LED SETUP