Powershell-History

Powershell-History
Download Copy
Title: Powershell-History
Author: atomiczsec

This payload will enumerate through the powershell directories, looking for the file that stores the history of the powershell console These files will be saved to the temp directory Finally dropbox will be used to exfiltrate the files to cloud storage

Exfiltration is an involuntary backup. It's a technique for obtaining data from a network. Once obtained, the data may be removed using a number of methods. These may include traversing the network to a command and control server, such as Cloud C². The content is typically encrypted or obfuscated. In the case of physical access, a bring-your-own-network element may be included to evade detection. See all exfiltration payloads.

This payload is for OMG — a platform built for covert field-use with features that enhance remote execution, stealth and forensics evasion, all while being able to quickly change your tooling on the fly.

Submit your own payload, or browse more featured OMG Payloads.

 

 

Related Payloads

Execute commands as NT AUTHORITY\SYSTEM with TrustedInstaller privileges
Execute commands as NT AUTHORITY\SYSTEM with TrustedInstaller privileges
This payload launches a new cmd.exe process with elevated privileges under TrustedInstaller, by setting the TrustedInsta
Read More
TCPDump
TCPDump
Dumps networking-data to USB storage. Completes on button-press or storage full.
Read More
Minimalistic web intercept
Minimalistic web intercept
Replace HTTP with Squirrels.
Read More