Book a Demo!
CoCalc Logo Icon
StoreFeaturesDocsShareSupportNewsAboutPoliciesSign UpSign In
hak5
GitHub Repository: hak5/usbrubberducky-payloads
 Path: blob/master/payloads/library/execution/Simple_PSH_Wallpaper_Changer/Payload.txt
3018 views
1
REM Wallpaper Changer

2
REM H4ck1ngM4rk

3
REM Downloads a picture and set it as wallpaper, gets Visible after Restart or Relogin

4
REM Tested on Windows 11 PRO

5


6
EXTENSION DETECT_READY

7
    REM VERSION 1.1

8
    REM AUTHOR: Korben

9


10
    REM_BLOCK DOCUMENTATION

11
        USAGE:

12
            Extension runs inline (here)

13
            Place at beginning of payload (besides ATTACKMODE) to act as dynamic

14
            boot delay

15


16
        TARGETS:

17
            Any system that reflects CAPSLOCK will detect minimum required delay

18
            Any system that does not reflect CAPSLOCK will hit the max delay of 3000ms

19
    END_REM

20


21
    REM CONFIGURATION:

22
    DEFINE #RESPONSE_DELAY 25

23
    DEFINE #ITERATION_LIMIT 120

24


25
    VAR $C = 0

26
    WHILE (($_CAPSLOCK_ON == FALSE) && ($C < #ITERATION_LIMIT))

27
        CAPSLOCK

28
        DELAY #RESPONSE_DELAY

29
        $C = ($C + 1)

30
    END_WHILE

31
    CAPSLOCK

32
END_EXTENSION

33


34


35
DEFINE URL example.com

36
REM The URL to get the Picture from

37
DEFINE PATH $home\XXX.jpg

38
REM Define where to store the Picture

39
GUI x

40
DELAY 100

41
STRING i

42
DELAY 750

43
STRING Invoke-WebRequest https://

44
STRING URL

45
SPACE

46
STRING -OutFile

47
SPACE

48
STRING PATH

49
STRING ; reg add "HKEY_CURRENT_USER\Control Panel\Desktop" /v Wallpaper /t REG_SZ /d "

50
STRING PATH

51
STRINGLN " /f; RUNDLL32.EXE USER32.DLL ,UpdatePerUserSystemParameters ,1 ,True;exit;

52


53