Bookmark-Hog

Bookmark-Hog

🏆   by atomiczsec August 30, 2022

Exfiltration OMG

This payload will enumerate through the browser directories, looking for the file that stores the bookmark history These files will be saved to the temp dire...
wifi-to-dropbox

wifi-to-dropbox

🏆   by ph3llin August 30, 2022

Exfiltration USB Rubber Ducky

GRABS ALL WIFI PASSWORDS ON WINDOWS CREATES log.txt ON DESKTOP THEN UPLOADS TO YOUR DROPBOX MUST EDIT DROP BOX TOKEN BELOW

Mac_Exfil

Mac_Exfil

🏆   by Carey Balboa August 30, 2022

Bash Bunny Exfiltration

Exfiltrates files from logged in users Documents and Desktop folders.
OooohThatsHandy

OooohThatsHandy

by PeteDavis91 July 14, 2022

Bash Bunny Exfiltration

Extract useful information such as nmap scan results, wifi keys, Local DNS Cache, User privileges and group memberships, user folder contents with images and...

Simple USB File Extractor

Simple USB File Extractor

🏆   by DanTheGoodman July 14, 2022

Bash Bunny Exfiltration

A stupid easy to use file extractor leveraging the USB storage attack mode. Will stuff the found files in the /loot/simple-usb-file-extractor folder. Also de...
Hard_Con_Exfil

Hard_Con_Exfil

by LulzAnarchyAnon June 22, 2022

Exfiltration OMG

This payload navigates its way to Hardware, and Connection properties. It then copies, and saves it as a notepad file named "targetloot" to the Downloads fol...

WiFi_Passwd_Grab

WiFi_Passwd_Grab

by LulzAnarchyAnon June 22, 2022

Exfiltration OMG

This is a Three stage payload that begins by navigating to Network and Sharing Center. It then opens the wireless properties security tab, and makes the Netw...
Chrome Exfil

Chrome Exfil

🏆   by thisismyrobot May 29, 2022

Exfiltration USB Rubber Ducky

A script to exfiltrate Chrome browser credentials from a target. Entered interactively to bypass a lot of PowerShell-related AV triggers. The Chrome GET requ...

BLE_EXFIL_DEMO

BLE_EXFIL_DEMO

🏆   by drapl0n May 02, 2022

Bash Bunny Exfiltration

Demonstration of BLE_EXFIL extension.
Poor_Mans_Nmap

Poor_Mans_Nmap

by JoustingZebra April 28, 2022

Exfiltration USB Rubber Ducky

This is a LAN scanner payload written for Windows targets with Powershell V5/7. Capabilities/Limitations the user should be aware of: - Automatically finds...

KeyManager Backup

KeyManager Backup

🏆   by Cribbit April 20, 2022

Bash Bunny Exfiltration

Create a backup of the key manager which stores log-on credentials for servers, websites and programs. Config: set the password for the backup by setting th...
Discord Windows Wifi IP-Info

Discord Windows Wifi IP-Info

by Startrk1995 April 17, 2022

Exfiltration USB Rubber Ducky

Grabs wifi passwords, environment data, IPv4 Network addresses, writes to a file, uploads it to Discord, then cleans up the file on the targets filesystem an...

ducky_crab

ducky_crab

by the-jcksn April 14, 2022

Exfiltration USB Rubber Ducky

Gives "screen crab" like capabilities to the USB rubber ducky. Creates a powershell script that captures screenshots and exfiltrates them via outlook, once a...
screenshot_exfil

screenshot_exfil

by the-jcksn April 08, 2022

Exfiltration USB Rubber Ducky

Creates zip folder of 5 most recent screenshots and sends them via outlook email.

intel(intelligence)

intel(intelligence)

by drapl0n March 08, 2022

Bash Bunny Exfiltration

intel(intelligence) payload collects detailed information of victims machine. 1. Prevent storing history. 2. Fetching BashBunny's block device. 3. Mounting B...
macOS rickroll with terminal payload

macOS rickroll with terminal payload

by Nils Streedain March 07, 2022

Exfiltration USB Rubber Ducky

Opens a rickroll in YouTube in full screen at maximum volume as a distraction while another command is run in terminal.

Mail Grabber

Mail Grabber

by Matthew Kayne March 03, 2022

Exfiltration USB Rubber Ducky

iMessages the last received email in the Mail app to an iMessage device of your choice
iMessage Data Grabber

iMessage Data Grabber

🏆   by Matthew Kayne March 01, 2022

Exfiltration USB Rubber Ducky

Sends any command output to an iMessage receiving number (this example grabs the devices IP)