From 8eae93068379930015159773087f81af4821b14f Mon Sep 17 00:00:00 2001 From: Aleff Date: Mon, 12 Jun 2023 08:33:34 +0200 Subject: [PATCH 1/4] Uninstall A Specific App On Windows Through Control Panel --- .../payload.txt | 75 +++++++++++++++++++ 1 file changed, 75 insertions(+) create mode 100644 payloads/library/execution/Uninstall_A_Specific_App_On_Windows_Through_Control_Panel/payload.txt diff --git a/payloads/library/execution/Uninstall_A_Specific_App_On_Windows_Through_Control_Panel/payload.txt b/payloads/library/execution/Uninstall_A_Specific_App_On_Windows_Through_Control_Panel/payload.txt new file mode 100644 index 0000000..eedd73f --- /dev/null +++ b/payloads/library/execution/Uninstall_A_Specific_App_On_Windows_Through_Control_Panel/payload.txt @@ -0,0 +1,75 @@ +REM ############################################################################## +REM # | +REM # Title : Uninstall A Specific App On Windows Through Control Panel | +REM # Author : Aleff | +REM # Version : 1.0 | +REM # Category : Execute | +REM # Target : Windows 10/11 | +REM # | +REM ############################################################################## + +REM Requirements: +REM - The application you want to uninstall must be installed on the target (?obvious right? ^^) + +REM Note: +REM - Payload tested on Windows 11 Eng + +REM Set the exact name of the application as it appears within the control panel. Do not assume that just because an application is known by a certain name then it will have exactly that name, e.g. `Firefox` shows up again as `Mozilla Firefox (x64 en)` +DEFINE APP_NAME example + + +REM Open Windows research +DELAY 2000 +GUI +DELAY 1000 + +REM Search and opern explorer app +STRING explorer +ENTER +DELAY 1000 + +REM Goto search bar and open "Uninstall or change a program" page +TAB +DELAY 500 +TAB +DELAY 500 +TAB +DELAY 500 +ENTER +DELAY 500 +STRING Control Panel\Programs\Programs and Features +ENTER +DELAY 1500 + +REM Goto search bar and search the app +TAB +DELAY 500 +TAB +DELAY 500 +TAB +DELAY 500 +TAB +DELAY 500 +STRING APP_NAME +DELAY 500 + +REM Select the app and click on it +TAB +DELAY 500 +TAB +DELAY 500 +TAB +DELAY 500 +TAB +DELAY 500 +TAB +DELAY 500 +TAB +DELAY 500 +SPACE +DELAY 500 +ENTER +DELAY 500 +ENTER +DELAY 2000 +ALT F4 From e01b3d7256f708de14be54e7b4ce0ef9cb17bf77 Mon Sep 17 00:00:00 2001 From: aleff-github Date: Mon, 12 Jun 2023 08:34:18 +0200 Subject: [PATCH 2/4] Create README.md --- .../README.md | 25 +++++++++++++++++++ 1 file changed, 25 insertions(+) create mode 100644 payloads/library/execution/Uninstall_A_Specific_App_On_Windows_Through_Control_Panel/README.md diff --git a/payloads/library/execution/Uninstall_A_Specific_App_On_Windows_Through_Control_Panel/README.md b/payloads/library/execution/Uninstall_A_Specific_App_On_Windows_Through_Control_Panel/README.md new file mode 100644 index 0000000..d4cf289 --- /dev/null +++ b/payloads/library/execution/Uninstall_A_Specific_App_On_Windows_Through_Control_Panel/README.md @@ -0,0 +1,25 @@ +# Uninstall A Specific App On Windows Through Control Panel + +This script can be used to uninstall a specific app on a Windows System. + +**Category**: Execute + +## Description + +This script can be used to uninstall a specific app on a Windows System. + +The script opens the research app and go to `Uninstall or change a program` page using the default path `Control Panel\Programs\Programs and Features`, then go to the search bar and write the app name, then got on the app, press space to select and enter to uninstall it. + +When uninstalling an application through the Windows Control Panel, it may not always be enough, especially for complex programs like antivirus software. In such cases, specific uninstaller applications are often required to ensure the complete removal of all components and avoid leaving behind residual files or registry entries. While most standard applications can be successfully uninstalled through the Control Panel, complex or security-related programs may benefit from using specific uninstaller applications for a more thorough and complete removal and, in that cases, this script doesn't work. + +**Unauthorized removal of an application is considered a crime** and can result in severe consequences. Tampering with system files without permission violates cybersecurity laws and can lead to legal penalties. + +In addition to legal implications, **unauthorized removal of an application can also pose permanent risks to files and system functionality**. Applications are designed to work within a specific environment, and sudden or improper removal can cause instability, errors, and permanent data loss. + +## Dependencies + +* Set the exact name of the application as it appears within the control panel. Do not assume that just because an application is known by a certain name then it will have exactly that name, e.g. `Firefox` shows up again as `Mozilla Firefox (x64 en)` + + ```DuckyScript + DEFINE APP_NAME example + ``` \ No newline at end of file From 99519a912ad999a72c51ac81df3163725e649d05 Mon Sep 17 00:00:00 2001 From: Aleff Date: Fri, 16 Jun 2023 23:40:48 +0200 Subject: [PATCH 3/4] Update README.md --- .../README.md | 30 ++++++++++++++++++- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/payloads/library/execution/Uninstall_A_Specific_App_On_Windows_Through_Control_Panel/README.md b/payloads/library/execution/Uninstall_A_Specific_App_On_Windows_Through_Control_Panel/README.md index d4cf289..4d1ece1 100644 --- a/payloads/library/execution/Uninstall_A_Specific_App_On_Windows_Through_Control_Panel/README.md +++ b/payloads/library/execution/Uninstall_A_Specific_App_On_Windows_Through_Control_Panel/README.md @@ -22,4 +22,32 @@ In addition to legal implications, **unauthorized removal of an application can ```DuckyScript DEFINE APP_NAME example - ``` \ No newline at end of file + ``` + +## Credits + +

Aleff :octocat:

+
+ + + + + + +
+ + + +
Github + 		+ + + +
Instagram + 		+ + + +
Discord +
+
From 4e30b23a55f8981b1fa913da2637f4d98ee2efaf Mon Sep 17 00:00:00 2001 From: aleff-github Date: Wed, 18 Oct 2023 11:52:21 +0200 Subject: [PATCH 4/4] Renamed --- .../README.md | 4 ++-- .../payload.txt | 6 +++--- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/payloads/library/execution/Uninstall_A_Specific_App_On_Windows_Through_Control_Panel/README.md b/payloads/library/execution/Uninstall_A_Specific_App_On_Windows_Through_Control_Panel/README.md index 4d1ece1..826bc0c 100644 --- a/payloads/library/execution/Uninstall_A_Specific_App_On_Windows_Through_Control_Panel/README.md +++ b/payloads/library/execution/Uninstall_A_Specific_App_On_Windows_Through_Control_Panel/README.md @@ -2,7 +2,7 @@ This script can be used to uninstall a specific app on a Windows System. -**Category**: Execute +**Category**: Execution ## Description @@ -21,7 +21,7 @@ In addition to legal implications, **unauthorized removal of an application can * Set the exact name of the application as it appears within the control panel. Do not assume that just because an application is known by a certain name then it will have exactly that name, e.g. `Firefox` shows up again as `Mozilla Firefox (x64 en)` ```DuckyScript - DEFINE APP_NAME example + DEFINE #APP_NAME example ``` ## Credits diff --git a/payloads/library/execution/Uninstall_A_Specific_App_On_Windows_Through_Control_Panel/payload.txt b/payloads/library/execution/Uninstall_A_Specific_App_On_Windows_Through_Control_Panel/payload.txt index eedd73f..67f6dbd 100644 --- a/payloads/library/execution/Uninstall_A_Specific_App_On_Windows_Through_Control_Panel/payload.txt +++ b/payloads/library/execution/Uninstall_A_Specific_App_On_Windows_Through_Control_Panel/payload.txt @@ -3,7 +3,7 @@ REM # REM # Title : Uninstall A Specific App On Windows Through Control Panel | REM # Author : Aleff | REM # Version : 1.0 | -REM # Category : Execute | +REM # Category : Execution | REM # Target : Windows 10/11 | REM # | REM ############################################################################## @@ -15,7 +15,7 @@ REM Note: REM - Payload tested on Windows 11 Eng REM Set the exact name of the application as it appears within the control panel. Do not assume that just because an application is known by a certain name then it will have exactly that name, e.g. `Firefox` shows up again as `Mozilla Firefox (x64 en)` -DEFINE APP_NAME example +DEFINE #APP_NAME example REM Open Windows research @@ -50,7 +50,7 @@ TAB DELAY 500 TAB DELAY 500 -STRING APP_NAME +STRING #APP_NAME DELAY 500 REM Select the app and click on it