QUACKed

payloads/library/Incident_Response/Defend_yourself_against_CVE-2023-36884_Office_and_Windows_HTML_R/payload.txt

@@ -28,58 +28,59 @@ REM It is recommended to implement these protective measures to prevent potentia
 
 REM Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884
 
-DELAY 1000
+QUACK DELAY 1000
-GUI x
+QUACK GUI x
-DELAY 500
+QUACK DELAY 500
-STRING a
+QUACK STRING a
-DELAY 500
+QUACK DELAY 500
-LEFTARROW
+QUACK LEFTARROW
-DELAY 500
+QUACK DELAY 500
-ENTER
+QUACK ENTER
 
 REM Sets the path to the registry key
-STRINGLN $registryPath = "HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_CROSS_PROTOCOL_FILE_NAVIGATION"
+QUACK STRING $registryPath = "HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_CROSS_PROTOCOL_FILE_NAVIGATION"
+QUACK ENTER
 
 REM Array of application names
-STRING $applicationNames = @(
+QUACK STRING $applicationNames = @(
-ENTER
+QUACK ENTER
-STRING "Excel.exe",
+QUACK STRING "Excel.exe",
-ENTER
+QUACK ENTER
-STRING "Graph.exe",
+QUACK STRING "Graph.exe",
-ENTER
-STRING "MSAccess.exe",
-ENTER
-STRING "MSPub.exe",
-ENTER
-STRING "Powerpnt.exe",
-ENTER
-STRING "Visio.exe",
-ENTER
-STRING "WinProj.exe",
-ENTER
-STRING "WinWord.exe",
-ENTER
-STRING "Wordpad.exe"
-ENTER
-STRING )
 ENTER
+QUACK STRING "MSAccess.exe",
+QUACK ENTER
+QUACK STRING "MSPub.exe",
+QUACK ENTER
+QUACK STRING "Powerpnt.exe",
+QUACK ENTER
+QUACK STRING "Visio.exe",
+QUACK ENTER
+QUACK STRING "WinProj.exe",
+QUACK ENTER
+QUACK STRING "WinWord.exe",
+QUACK ENTER
+QUACK STRING "Wordpad.exe"
+QUACK ENTER
+QUACK STRING )
+QUACK ENTER
 
 REM Create the registry key if it does not already exist
-STRING if (!(Test-Path $registryPath)) {
+QUACK STRING if (!(Test-Path $registryPath)) {
-ENTER
+QUACK ENTER
-STRING New-Item -Path $registryPath -Force | Out-Null
+QUACK STRING New-Item -Path $registryPath -Force | Out-Null
-ENTER
+QUACK ENTER
-STRING echo "Registry key created"
+QUACK STRING echo "Registry key created"
-ENTER
+QUACK ENTER
-STRING }
+QUACK STRING }
-ENTER
+QUACK ENTER
 
 REM Add the values to the registry key
-STRING foreach ($appName in $applicationNames) {
+QUACK STRING foreach ($appName in $applicationNames) {
-ENTER
+QUACK ENTER
-STRING Set-ItemProperty -Path $registryPath -Name $appName -Value 1 -Type DWORD -Force | Out-Null
+QUACK STRING Set-ItemProperty -Path $registryPath -Name $appName -Value 1 -Type DWORD -Force | Out-Null
-ENTER
+QUACK ENTER
-STRING echo "[+] $appName"
+QUACK STRING echo "[+] $appName"
-ENTER
+QUACK ENTER
-STRING }
+QUACK STRING }
-ENTER
+QUACK ENTER