-
Star
(189)
You must be signed in to star a gist -
Fork
(43)
You must be signed in to fork a gist
-
-
Save jamesfreeman959/231b068c3d1ed6557675f21c0e346a9c to your computer and use it in GitHub Desktop.
| # Useful references: | |
| # | |
| # https://superuser.com/questions/992511/emulate-a-keyboard-button-via-the-command-line | |
| # https://ss64.com/vb/sendkeys.html | |
| # https://social.technet.microsoft.com/Forums/windowsserver/en-US/96b339e2-e9da-4802-a66d-be619aeb21ac/execute-function-one-time-in-every-10-mins-in-windows-powershell?forum=winserverpowershell | |
| # https://learn-powershell.net/2013/02/08/powershell-and-events-object-events/ | |
| # | |
| # Future enhancements - use events rather than an infinite loop | |
| $wsh = New-Object -ComObject WScript.Shell | |
| while (1) { | |
| # Send Shift+F15 - this is the least intrusive key combination I can think of and is also used as default by: | |
| # http://www.zhornsoftware.co.uk/caffeine/ | |
| # Unfortunately the above triggers a malware alert on Sophos so I needed to find a native solution - hence this script... | |
| $wsh.SendKeys('+{F15}') | |
| Start-Sleep -seconds 59 | |
| } |
I present to you the ultimate oneliner, StealthCoffee:
- Creates a hidden window to run the new process
- Autoexits the original window we paste this into
- Stops running at 18:15 +/- 5 localtime of the same day
- Sends scroll lock twice (random ms range 103-153) in random intervals between 33 seconds and 183 seconds
Repo to open in incognito and copy the oneliner from: StealthCoffee
Here is the snippet also, you can just copy paste it in a Powershell terminal:
Start-Process powershell -WindowStyle Hidden -ArgumentList '-Command "$wshell = New-Object -ComObject wscript.shell; $end = (Get-Date).Date.AddHours(18).AddMinutes(15).AddMinutes((Get-Random -Minimum -5 -Maximum 5)); while((Get-Date) -lt $end){$wshell.SendKeys(''{SCROLLLOCK}'' ); Start-Sleep -Milliseconds (Get-Random -Minimum 103 -Maximum 153); $wshell.SendKeys(''{SCROLLLOCK}''); Start-Sleep -Seconds (Get-Random -Minimum 33 -Maximum 183)}"'; exit
ProTip: Don't save it as a file locally. I don't have this script anywhere on my local machine to avoid any detection, i just open an incognito window in Google Chrome, navigate to the public repository i listed above and just copy paste the raw text from the file in a Powershell terminal.
In general, the script runs beautiful. I had reduced it to the following oneliner, which even adds a random element:
$wsh=New-Object -ComObject WScript.Shell;$i=0;while(1) {$wsh.SendKeys('+{F15}');clear;write-host 'Caffeine applied for' $i seconds -nonewline;$j=(Get-Random -Minimum 5 -Maximum 25);$i=$i+$j;sleep $j}
The only problem is: It only doesn't run any more with PowerShell in ConstraintLanguage Mode, it appears this disables the function SendKeys. Does anyone have an alternate how to provide the function while ConstraintLanguage Mode is active?
my example from 2 years ago doesn't use powershell at all, but it's a standalone file.
You can copy the powershell code to a
.cmdfile together with PowerBatch as shown below and run it.