mirror of https://github.com/hak5/omg-payloads.git
98 lines
2.4 KiB
Markdown
98 lines
2.4 KiB
Markdown
|
|
||
|
|
|
||
|
|
<!-- TABLE OF CONTENTS -->
|
||
|
|
<details>
|
||
|
|
<summary>Table of Contents</summary>
|
||
|
|
<ol>
|
||
|
|
<li><a href="#Description">Description</a></li>
|
||
|
|
<li><a href="#getting-started">Getting Started</a></li>
|
||
|
|
<li><a href="#Contributing">Contributing</a></li>
|
||
|
|
<li><a href="#Version-History">Version History</a></li>
|
||
|
|
<li><a href="#Contact">Contact</a></li>
|
||
|
|
<li><a href="#Acknowledgments">Acknowledgments</a></li>
|
||
|
|
</ol>
|
||
|
|
</details>
|
||
|
|
|
||
|
|
# Safe Haven
|
||
|
|
|
||
|
|
A script used to open an elevated powershell console and created a folder ignored by the AntiVirus
|
||
|
|
|
||
|
|
## Description
|
||
|
|
|
||
|
|
This is a UAC bypass payload that will open an elevated powershell console
|
||
|
|
|
||
|
|
Next a Directory called "safe" will be generated in your Documents Directory
|
||
|
|
|
||
|
|
The "safe" directory will be added to the Window's Defender Exclusion list
|
||
|
|
|
||
|
|
The AntiVirus will ignore all files downloaded to or ran from here
|
||
|
|
|
||
|
|
## Getting Started
|
||
|
|
|
||
|
|
### Dependencies
|
||
|
|
|
||
|
|
* Windows 10,11
|
||
|
|
|
||
|
|
<p align="right">(<a href="#top">back to top</a>)</p>
|
||
|
|
|
||
|
|
### Executing program
|
||
|
|
|
||
|
|
* Plug in your device
|
||
|
|
* A keystroke injection based payload will run
|
||
|
|
|
||
|
|
<p align="right">(<a href="#top">back to top</a>)</p>
|
||
|
|
|
||
|
|
## Contributing
|
||
|
|
|
||
|
|
All contributors names will be listed here
|
||
|
|
|
||
|
|
I am Jakoby
|
||
|
|
|
||
|
|
<p align="right">(<a href="#top">back to top</a>)</p>
|
||
|
|
|
||
|
|
## Version History
|
||
|
|
|
||
|
|
* 0.1
|
||
|
|
* Initial Release
|
||
|
|
|
||
|
|
<p align="right">(<a href="#top">back to top</a>)</p>
|
||
|
|
|
||
|
|
<!-- CONTACT -->
|
||
|
|
## Contact
|
||
|
|
|
||
|
|
<div><h2>I am Jakoby</h2></div>
|
||
|
|
<p><br/>
|
||
|
|
|
||
|
|
<img src="https://media.giphy.com/media/VgCDAzcKvsR6OM0uWg/giphy.gif" width="50">
|
||
|
|
|
||
|
|
<a href="https://github.com/I-Am-Jakoby/">
|
||
|
|
<img src="https://img.shields.io/badge/GitHub-I--Am--Jakoby-blue">
|
||
|
|
</a>
|
||
|
|
|
||
|
|
<a href="https://www.instagram.com/i_am_jakoby/">
|
||
|
|
<img src="https://img.shields.io/badge/Instagram-i__am__jakoby-red">
|
||
|
|
</a>
|
||
|
|
|
||
|
|
<a href="https://twitter.com/I_Am_Jakoby/">
|
||
|
|
<img src="https://img.shields.io/badge/Twitter-I__Am__Jakoby-blue">
|
||
|
|
</a>
|
||
|
|
|
||
|
|
<a href="https://www.youtube.com/c/IamJakoby/">
|
||
|
|
<img src="https://img.shields.io/badge/YouTube-I_am_Jakoby-red">
|
||
|
|
</a>
|
||
|
|
|
||
|
|
Project Link: (https://github.com/I-Am-Jakoby/hak5-submissions/tree/main/OMG/Payloads/OMG-SafeHaven)
|
||
|
|
</p>
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
<p align="right">(<a href="#top">back to top</a>)</p>
|
||
|
|
|
||
|
|
<!-- ACKNOWLEDGMENTS -->
|
||
|
|
## Acknowledgments
|
||
|
|
|
||
|
|
* [Hak5](https://hak5.org/)
|
||
|
|
* [MG](https://github.com/OMG-MG)
|
||
|
|
|
||
|
|
<p align="right">(<a href="#top">back to top</a>)</p>
|