Path: blob/master/payloads/extensions/exfil_auto_eof_detect.txt
2968 views
EXTENSION EXFIL_AUTO_EOF_DETECT1REM VERSION 1.12REM AUTHOR: Korben34REM_BLOCK DOCUMENTATION5USAGE:6Call WAIT_FOR_EOF() after starting Keystroke Reflection / HID Exfil78TARGETS:9Requires reflection of at least 2 lock keys.10Intended for use on systems that dont reflect more than 2 lock keys.11END_REM1213REM CONFIGURATION14DEFINE #INACTIVTY_TARGET 101516FUNCTION WAIT_FOR_EOF()17VAR $CURRENT_CAPSLOCK_STATE = $_CAPSLOCK_ON18VAR $CURRENT_NUMLOCK_STATE = $_NUMLOCK_ON19VAR $PROCESSING = TRUE20VAR $INACTIVITY_COUNT = 021WHILE ($PROCESSING)22DELAY 2023IF($CURRENT_CAPSLOCK_STATE != $_CAPSLOCK_ON) THEN24$CURRENT_CAPSLOCK_STATE = $_CAPSLOCK_ON25$PROCESSING = TRUE26LED_G27ELSE IF($CURRENT_NUMLOCK_STATE != $_NUMLOCK_ON) THEN28$CURRENT_NUMLOCK_STATE = $_NUMLOCK_ON29$PROCESSING = TRUE30LED_R31ELSE32$INACTIVTY_COUNT = ($INACTIVTY_COUNT + 1)33IF ($INACTIVTY_COUNT >= #INACTIVTY_TARGET) THEN34$PROCESSING = FALSE35END_IF36LED_OFF37END_IF38END_WHILE39LED_G40END_FUNCTION41END_EXTENSION424344