Update README.md

This commit is contained in:
egieb
2024-03-17 09:31:39 +00:00
committed by GitHub
parent 5d88cfb999
commit d4775c834b

View File

@@ -1,32 +1,25 @@
# PoshCord-C2
MAIN SCRIPT HERE - https://github.com/beigeworm/PoshCord-C2
**SYNOPSIS**
Using a Discord webhook and a hosted text file to Act as a Command and Control Platform.
![a](https://github.com/beigeworm/BadUSB-Files-For-FlipperZero/assets/93350544/fbd9e46b-5ba2-402b-ac7e-4464985e085a)
Using a Discord bot along with discords API and a webhook to Act as a Command and Control Platform.
**INFORMATION**
This script will wait until it notices a change in the contents of a text file hosted online (eg. github/pastebin).
Every 10 seconds it will check a file for a change in the file contents and interpret it as a custom command / module.
This script uses a discord bot along with discords API and a webhook to create a chat that can control a windows pc.
Every 10 seconds it will check for a new message in chat and interpret it as a custom command / module in powershell.
*Using github to host your command file will take up to 5 minutes to run each module command - Use pastebin (account needed) OR your own server to host the txt file for instant response*
**Demo** (using .vbs stager and python bot)
![GIF 3-14-2024 7-18-11 PM](https://github.com/beigeworm/PoshCord-C2/assets/93350544/d1805cf3-f850-45c1-b4d2-c342cc17ecdb)
**SETUP**
1. make a discord bot at https://discord.com/developers/applications/
2. in bot > server intents turn on everything
3. add the bot to your discord server (oauth > copy link) copy link
![Screenshot_1](https://github.com/beigeworm/BadUSB-Files-For-FlipperZero/assets/93350544/b3fe7785-dcf3-4971-99f0-f3456ddc34ef)
4. create a webhook in the desired channel on your server. ( channel-settings/integrations )
5. FLIPPER ONLY - goto https://t.ly and make a short link for the webhook. (run prompt only allows 256 characters!)
6. Change WEBHOOK_URL below to your short webhook URL eg. https://t.ly/byuf4e
7. Change BOT_TOKEN below with your bot token
8. Change CHANNEL_ID below to the channel id of your webhook.
2. add the bot to your discord server
3. create a webhook in the desired channel on your server. ( channel-settings/integrations )
3. Change $dc below to your webhook URL eg. https://discord.com/api/webhooks/123445623531/f4fw3f4r46r44343t5gxxxxxx
4. Change $tk below with your bot token
5. Change $ch below to the channel id of your webhook.
**USAGE**
1. Setup the script
@@ -36,35 +29,63 @@ Every 10 seconds it will check a file for a change in the file contents and inte
5. Do the same with any other command listed - To run that module.
**MODULES**
1. `Message` : Send a message window to the Users desktop.
2. `SpeechToText` : Send microphone audio transcript to Discord
3. `Screenshot` : Sends a screenshot of the desktop to Discord.
4. `KeyCapture` : Capture Keystrokes and send to Discord. (see ExtraInfo for usage.)
5. `Exfiltrate` : Send various files to Discord zipped in 25mb files. (see ExtraInfo for usage.)
6. `Upload` : Upload a file to Discord. (see ExtraInfo for usage.)
7. `Systeminfo` : Send System information as text file to Discord. (takes a few minutes to gather data)
8. `RecordAudio` : Record microphone to Discord (RecordAudio -t 100) in seconds
9. `RecordScreen` : Record Screen to Discord (RecordScreen -t 100) in seconds
10. `TakePicture` : Send a webcam picture to Discord. (can take a few minutes..)
11. `FolderTree` : Save folder trees to file and send to Discord.
12. `FakeUpdate` : Spoof windows update screen.
13. `Nearby-Wifi` : Show nearby wifi networks
14. `Send-Hydra` : Never ending popups (use killswitch)
15. `AddPersistance` : Add this script to the startup folder.
16. `RemovePersistance` : Remove this script from the startup folder.
17. `IsAdmin` : Check if the session is admin.
18. `AttemptElevate` : Attempt to restart script as admin. (displays a UAC prompt to User)
19. `EnumerateLAN` : Show all devices on the network (see ExtraInfo for usage.) (can take a few miniutes to complete)
20. `Close` : Close this Session
21. `Options` : Show the Module menu
22. `ExtraInfo` : Show extra Module information
- **SpeechToText**: Send audio transcript to Discord
- **Systeminfo**: Send System info as text file to Discord
- **FolderTree**: Save folder trees to file and send to Discord
- **EnumerateLAN**: Show devices on LAN (see ExtraInfo)
- **NearbyWifi**: Show nearby wifi networks (!user popup!)
- **AddPersistance**: Add this script to startup.
- **RemovePersistance**: Remove Poshcord from startup
- **IsAdmin**: Check if the session is admin
- **Elevate**: Attempt to restart script as admin (!user popup!)
- **ExcludeCDrive**: Exclude C:/ Drive from all Defender Scans
- **ExcludeAllDrives**: Exclude C:/ - G:/ Drives from Defender Scans
- **EnableRDP**: Enable Remote Desktop on target.
- **EnableIO**: Enable Keyboard and Mouse
- **DisableIO**: Disable Keyboard and Mouse
- **RecordAudio**: Record microphone and send to Discord
- **RecordScreen**: Record Screen and send to Discord
- **TakePicture**: Send a webcam picture and send to Discord
- **Exfiltrate**: Send various files. (see ExtraInfo)
- **Upload**: Upload a file. (see ExtraInfo)
- **Screenshot**: Sends a screenshot of the desktop and send to Discord
- **Keycapture**: Capture Keystrokes and send to Discord
- **FakeUpdate**: Spoof Windows-10 update screen using Chrome
- **Windows93**: Start parody Windows93 using Chrome
- **WindowsIdiot**: Start fake Windows95 using Chrome
- **SendHydra**: Never ending popups (use killswitch) to stop
- **SoundSpam**: Play all Windows default sounds on the target
- **Message**: Send a message window to the User (!user popup!)
- **VoiceMessage**: Send a message window to the User (!user popup!)
- **MinimizeAll**: Send a voice message to the User
- **EnableDarkMode**: Enable System wide Dark Mode
- **DisableDarkMode**: Disable System wide Dark Mode\
- **VolumeMax**: Maximise System Volume
- **VolumeMin**: Minimise System Volume
- **ShortcutBomb**: Create 50 shortcuts on the desktop.
- **Wallpaper**: Set the wallpaper (wallpaper -url http://img.com/f4wc)
- **Goose**: Spawn an annoying goose (Sam Pearson App)
- **ExtraInfo**: Get a list of further info and command examples
- **Cleanup**: Wipe history (run prompt, powershell, recycle bin, Temp)
- **Kill**: Stop a running module (eg. Keycapture / Exfiltrate)
- **Control-All**: Control all waiting sessions simultaneously
- **Pause**: Pause the current authenticated session
- **Close**: Close this session
**FEATURES**
**Custom Scripting**
Edit the hosted file contents to any custom powershell script or command to run custom powershell.
You can add custom scripting / commands - Type 'YOUR CUSTOM POWERSHELL COMMAND' in chat
**Mass Control Mode**
Control all waiting sessions simultaneously with 'controll-all' to mass authenticate sessions.
**Killswitch**