Path: blob/master/payloads/library/execution/Randomizing_User-Agent_in_Google_Chrome/payload.txt
2971 views
REM_BLOCK1#############################################################2# #3# Title : Randomizing User-Agent in Google Chrome #4# Author : Aleff #5# Version : 1.0 #6# Category : Execution #7# Target : Chrome on Linux (Tested on Ubuntu) #8# #9#############################################################10END_REM1112REM Replace it with your sudo user password13DEFINE #SUDO_PSWD example1415REM May it depends...16DEFAULT_DELAY 2501718REM Define if you want to erase the tracks of your commands19DEFINE I_WANT_TO_ERASE_THE_SHELL_TRACKS FALSE2021REM_BLOCK22Credits: Hak5 LLC23Website: https://hak5.org/24Source: https://github.com/hak5/usbrubberducky-payloads/blob/master/payloads/extensions/detect_ready.txt25END_REM2627EXTENSION DETECT_READY28REM VERSION 1.129REM AUTHOR: Korben3031REM_BLOCK DOCUMENTATION32USAGE:33Extension runs inline (here)34Place at beginning of payload (besides ATTACKMODE) to act as dynamic35boot delay3637TARGETS:38Any system that reflects CAPSLOCK will detect minimum required delay39Any system that does not reflect CAPSLOCK will hit the max delay of 3000ms40END_REM4142REM CONFIGURATION:43DEFINE #RESPONSE_DELAY 2544DEFINE #ITERATION_LIMIT 1204546VAR $C = 047WHILE (($_CAPSLOCK_ON == FALSE) && ($C < #ITERATION_LIMIT))48CAPSLOCK49DELAY #RESPONSE_DELAY50$C = ($C + 1)51END_WHILE52CAPSLOCK53END_EXTENSION5455CTRL-ALT t56DELAY 10005758STRINGLN_BASH59echo '#!/bin/bash' > .randomize_user_agent60echo 'UA=$(torify curl "https://user-agents.net/random" -H "content-type: application/x-www-form-urlencoded" -H "referer: https://user-agents.net/random" --data-raw "limit=1&action=generate")' >> .randomize_user_agent61echo 're="<li><a href=\".+\">(.+)<\/a><\/li>"' >> .randomize_user_agent62echo 'if [[ $UA =~ $re ]]; then63/usr/bin/google-chrome-stable --user-agent="${BASH_REMATCH[1]}"64else65/usr/bin/google-chrome-stable66fi' >> .randomize_user_agent67sudo chmod +x .randomize_user_agent68END_STRINGLN6970DELAY 7507172STRINGLN_BASH73#SUDO_PSWD74NEW_STRING="/home/$(whoami)/.randomize_user_agent"75awk -v new="$NEW_STRING" '{gsub("/usr/bin/google-chrome-stable", new)}1' /usr/share/applications/google-chrome.desktop > tmp76sudo tee /usr/share/applications/google-chrome.desktop < tmp77gtk-update-icon-cache78END_STRINGLN7980IF_DEFINED_TRUE #I_WANT_TO_ERASE_THE_SHELL_TRACKS81STRINGLN rm $HISTFILE; exit82END_IF_DEFINED838485