Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Exfiltrate Windows Product Key #400

Open
wants to merge 3 commits into
base: master
Choose a base branch
from

Conversation

aleff-github
Copy link
Contributor

Through this payload, you can export the key information related to the Windows Product Key, knowing its type and the key itself, using a Discord Webhook.

Through this payload, you can export the key information related to the Windows Product Key, knowing its type and the key itself, using a Discord Webhook.
@dallaswinger
Copy link
Member

I'll be honest I think if this were to be used for "legit purposes" exfiltrating to the ducky storage would make a lot more sense (and is less likely to be misused) Imagining being in IT and decommissioning a PC that will be replaced and trying to retrieve the key for transfer, setting up a discord server and webhook seems like a lot of arbitrary extra work;

That being said, this would be a good opportunity to have both exfiltration methods in the payload and use IF_DEFINED_TRUE to allow the user to configure which method theyd prefer

just my 2c; open to rebuttal

@aleff-github
Copy link
Contributor Author

That being said, this would be a good opportunity to have both exfiltration methods in the payload and use IF_DEFINED_TRUE to allow the user to configure which method theyd prefer

This is a very good idea indeed, I had not considered the possibility of using both methods.
I plan to modify this payload appropriately based on your advice as soon as I can.

The method of data storage via USB Rubber Ducky storage has been added.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants