From 9a2e80673f001053c9a79e8e1bdc9705a13085b1 Mon Sep 17 00:00:00 2001 From: aleff-github Date: Mon, 12 Jun 2023 14:42:32 +0200 Subject: [PATCH] Create README.md --- .../README.md | 24 +++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 payloads/library/exfiltration/Export_all_saved_certificates_with_Adobe_Reader/README.md diff --git a/payloads/library/exfiltration/Export_all_saved_certificates_with_Adobe_Reader/README.md b/payloads/library/exfiltration/Export_all_saved_certificates_with_Adobe_Reader/README.md new file mode 100644 index 0000000..a1d1973 --- /dev/null +++ b/payloads/library/exfiltration/Export_all_saved_certificates_with_Adobe_Reader/README.md @@ -0,0 +1,24 @@ +# Export all saved certificates with Adobe Reader + +This script can be used to export all PFX certificates saved in plain text and without any protection from Adobe Reader. + +**Category**: Exfiltration + +## Description + +This script can be used to export all PFX certificates saved in plain text and without any protection from Adobe Reader. + +Open a PowerShell, go to Adobe Reader Path dinamically, then select all the pfx certificates, then set the exfiltration settings and export the certificates trough a foreach using Dropbox. + +**The unauthorized extraction of PFX certificates can be considered a criminal offense**. Taking possession of such certificates, which contain sensitive information such as private keys and critical authentication data, violates the owner's property rights. + +## Dependencies + +* Adobe Reader must be installed +* Internet Connection + +## Settings + +- You must define your Dropbox accessToken or modify the exfiltration modality. Replace just the example word with your token. + + `DEFINE DROPBOX_ACCESS_TOKEN "example"` \ No newline at end of file