Jump to content

trumoo

Active Members
  • Posts

    12
  • Joined

  • Last visited

Posts posted by trumoo

  1. Thanks. Issue was I didn't change lang from de to us in the payload.txt.

    Payload is working now. At the end of the script, it closes the first cmd prompt but leaves open the red elevated cmd prompt. I'm running Windows 10 1607 as an admin.

    KmukRMx.png

    I added 

    # Kill powershell.exe 
    kill -processname powershell -ErrorAction SilentlyContinue

    to the bottom of my .ps1 to properly terminate the powershell window.

     

    I love this script, thank you for all your hard work!

  2. unsure if this is working for me. the script opens a powershell window, which stays open and reads;

    Quote

    Windows PowerShell
    Copyright (C) 2016 Microsoft Corporation. All rights reserved.

    PS C:\Users\RoM> $Bunny = (gwmi win32_volume -f 'label=''BashBunny''' | Select-Object -ExpandProperty DriveLetter)
    PS C:\Users\RoM>
    PS C:\Users\RoM>

    and then the bunny blinks purple endlessly. is this a bug when there is no saved passwords in chrome or a syntax error in the script?

  3. Thanks! URL to script is wrong in first post, you typo'd it with wificreds instead of chromecreds.

    Question, can you please make a version that stores the powershell script locally for extraction on devices that are offline at the time of capture? Cheers!

×
×
  • Create New...