Merge 6d382420a8 into 675972662a
wyattm22
GitHub
commit
05f29fe553
|
|
@ -0,0 +1,217 @@
|
|||
REM TITLE Desktop Gese
|
||||
REM AUTHOR Fly Fisher
|
||||
REM DESCRIPTION This payload will copy files from the Desktop Goose application, it should be stored on ducky
|
||||
REM It then will run the Desktop Goose.exe file 30 times.
|
||||
REM Check to see what letter you Ducky comes up as on a computer before running this.
|
||||
DELAY 3000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING cmd
|
||||
SHIFT-ENTER
|
||||
DELAY 1000
|
||||
STRING copy D:\Read me! Honk.txt
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING copy D:\patrons.txt
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING copy D:\MMQ.dll
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING copy D:\GooseModdingAPI.dll
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING copy D:\GooseDesktop.exe
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING copy D:\config.ini
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING copy D:\changelog.txt
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING copy D:\Autumn.txt
|
||||
ENTER
|
||||
DELAY 500
|
||||
DELAY 500
|
||||
STRING powershell
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING exit
|
||||
ENTER
|
||||
|
|
@ -0,0 +1,217 @@
|
|||
REM TITLE Desktop Gese
|
||||
REM AUTHOR Fly Fisher
|
||||
REM DESCRIPTION This payload will copy files from the Desktop Goose application, it should be stored on ducky
|
||||
REM It then will run the Desktop Goose.exe file 30 times.
|
||||
REM Check to see what letter you Ducky comes up as on a computer before running this.
|
||||
DELAY 3000
|
||||
GUI r
|
||||
DELAY 500
|
||||
STRING cmd
|
||||
SHIFT-ENTER
|
||||
DELAY 1000
|
||||
STRING copy D:\Read me! Honk.txt
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING copy D:\patrons.txt
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING copy D:\MMQ.dll
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING copy D:\GooseModdingAPI.dll
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING copy D:\GooseDesktop.exe
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING copy D:\config.ini
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING copy D:\changelog.txt
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING copy D:\Autumn.txt
|
||||
ENTER
|
||||
DELAY 500
|
||||
DELAY 500
|
||||
STRING powershell
|
||||
ENTER
|
||||
DELAY 500
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
|
||||
ENTER
|
||||
DELAY 500
|
||||
ENTER
|
||||
GUI TAB
|
||||
DELAY 100
|
||||
ENTER
|
||||
DELAY 100
|
||||
STRING exit
|
||||
ENTER
|
||||
Loading…
Reference in New Issue