From 8047cb218a85fd4eef243de9a0d1d27a07f1cc78 Mon Sep 17 00:00:00 2001
From: Marc <foxtrot@realloc.me>
Date: Fri, 5 Jul 2019 05:06:43 +0000
Subject: [PATCH] Cleanup: Update Hidden_Images to include new payload header.

---
 .../Incident_Response/Hidden_Images/payload.txt      | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/payloads/library/Incident_Response/Hidden_Images/payload.txt b/payloads/library/Incident_Response/Hidden_Images/payload.txt
index 1dd42046..b02edc11 100644
--- a/payloads/library/Incident_Response/Hidden_Images/payload.txt
+++ b/payloads/library/Incident_Response/Hidden_Images/payload.txt
@@ -1,3 +1,15 @@
+# Title: Hidden_Images
+# Author: Murty007
+# Creds: thehappydinoa
+# Description: A (naive) user may attempt to hide image(picture) files by simply
+# renaming them to appear to be other filetypes (i.e. Word documents etc).
+# This payload uses a powershell script to walk the userprofile to look
+# for image files that have been hidden in this manner.
+#
+# LEDS:
+# Magenta: Setup
+# Yellow Blink: Attacking
+
 LED SETUP
 GET SWITCH_POSITION
 ATTACKMODE HID STORAGE