Michael.mast: Created page with "==Purpose== One of my users complained their computer was cursed. ==Setup== Download the files, place on network share. Either sign the powershell script, or be bad and dis..."

2020-02-05T20:42:25Z

Created page with "==Purpose== One of my users complained their computer was cursed. ==Setup== *Download the files, place on network share. *Either sign the powershell script, or be bad and dis..."

New page

==Purpose==
One of my users complained their computer was cursed.

==Setup==
*Download the files, place on network share.
*Either sign the powershell script, or be bad and disable protections
<pre>
new-pssession -computername <remote computer> | enter-pssession
new-Itemproperty -Path 'HKLM:\SOFTWARE\Microsoft\PowerShell\1\ShellIds\Microsoft.PowerShell' -Name 'ExecutionPolicy' -Value 'Bypass' -PropertyType 'string
</pre>
*Create scheduled task on the target system to run the following when the target user logs in.
<pre>
<Exec>
<Command>powershell</Command>
<Arguments>-windowstyle hidden -f '\\<network share>\goose.ps1'</Arguments>
</Exec>
</pre>
*Create goose.ps1
<pre>
$path1='\\<network share>'
sleep5
while ($true) {
if (test-path "$path1\on.txt") {
if (!(Get-process -name GooseDesktop -ErrorAction SilentlyContinue)) {
$exe="$path1\GooseDesktop.exe"
invoke-expression $exe
#echo 'this should be on'
sleep 1
}
} else {
Stop-Process -Name GooseDesktop
#echo 'this should be off'
sleep 1
}
</pre>
*If all is well, when the user logs in they may see a brief terminal but it goes away. At which point you can create a text file called on.txt in the network share that will start the goose. Deleting or renaming the file will kill the goose.
<br>
<br>
Ultimately I am setting this up for my users to use against their coworkers. I would like a web interface for this, but for now separate network shares with permissions will suffice.

Goose Desktop - Revision history

Michael.mast: Created page with "==Purpose== One of my users complained their computer was cursed. ==Setup== *Download the files, place on network share. *Either sign the powershell script, or be bad and dis..."

Michael.mast: Created page with "==Purpose== One of my users complained their computer was cursed. ==Setup== Download the files, place on network share. Either sign the powershell script, or be bad and dis..."