105 lines
2.8 KiB
Markdown
105 lines
2.8 KiB
Markdown
|
|
|
|
<!-- TABLE OF CONTENTS -->
|
|
<details>
|
|
<summary>Table of Contents</summary>
|
|
<ol>
|
|
<li><a href="#Description">Description</a></li>
|
|
<li><a href="#getting-started">Getting Started</a></li>
|
|
<li><a href="#Contributing">Contributing</a></li>
|
|
<li><a href="#Version-History">Version History</a></li>
|
|
<li><a href="#Contact">Contact</a></li>
|
|
<li><a href="#Acknowledgments">Acknowledgments</a></li>
|
|
</ol>
|
|
</details>
|
|
|
|
# UrAttaControl
|
|
|
|
A script used to open an elevated powershell console and execute admin level commands
|
|
|
|
## Description
|
|
|
|
Completely ran from the execute file. Replace the URL in that file with yours leading to a base64 script
|
|
|
|
This script will use IEX to download a base64 script to the $Payload variable
|
|
|
|
Using a keystroke injections attack a heavily obfuscated and encoded snippet will download and execute any base64
|
|
|
|
script saved in the $Payload variable
|
|
|
|
This payload completely bypasses the UAC and will run any admin level script without a prompt
|
|
|
|
You can use this function I wrote to convert your .ps1 sscripts to Base64
|
|
|
|
https://github.com/I-Am-Jakoby/PowerShell-for-Hackers/blob/main/Functions/B64.md
|
|
|
|
## Getting Started
|
|
|
|
### Dependencies
|
|
|
|
* DropBox or other file sharing service - Your Shared link for the intended file
|
|
* Windows 10,11
|
|
|
|
<p align="right">(<a href="#top">back to top</a>)</p>
|
|
|
|
### Executing program
|
|
|
|
* Plug in your device
|
|
* A keystroke injection based payload will run
|
|
|
|
<p align="right">(<a href="#top">back to top</a>)</p>
|
|
|
|
## Contributing
|
|
|
|
All contributors names will be listed here
|
|
|
|
I am Jakoby
|
|
|
|
<p align="right">(<a href="#top">back to top</a>)</p>
|
|
|
|
## Version History
|
|
|
|
* 0.1
|
|
* Initial Release
|
|
|
|
<p align="right">(<a href="#top">back to top</a>)</p>
|
|
|
|
<!-- CONTACT -->
|
|
## Contact
|
|
|
|
<div><h2>I am Jakoby</h2></div>
|
|
<p><br/>
|
|
|
|
<img src="https://media.giphy.com/media/VgCDAzcKvsR6OM0uWg/giphy.gif" width="50">
|
|
|
|
<a href="https://github.com/I-Am-Jakoby/">
|
|
<img src="https://img.shields.io/badge/GitHub-I--Am--Jakoby-blue">
|
|
</a>
|
|
|
|
<a href="https://www.instagram.com/i_am_jakoby/">
|
|
<img src="https://img.shields.io/badge/Instagram-i__am__jakoby-red">
|
|
</a>
|
|
|
|
<a href="https://twitter.com/I_Am_Jakoby/">
|
|
<img src="https://img.shields.io/badge/Twitter-I__Am__Jakoby-blue">
|
|
</a>
|
|
|
|
<a href="https://www.youtube.com/c/IamJakoby/">
|
|
<img src="https://img.shields.io/badge/YouTube-I_am_Jakoby-red">
|
|
</a>
|
|
|
|
Project Link: [https://github.com/I-Am-Jakoby/hak5-submissions/tree/main/RubberDucky/Payloads/RD-UrAttaControl)
|
|
</p>
|
|
|
|
|
|
|
|
<p align="right">(<a href="#top">back to top</a>)</p>
|
|
|
|
<!-- ACKNOWLEDGMENTS -->
|
|
## Acknowledgments
|
|
|
|
* [Hak5](https://hak5.org/)
|
|
* [MG](https://github.com/OMG-MG)
|
|
|
|
<p align="right">(<a href="#top">back to top</a>)</p>
|