Search the Community
Showing results for tags 'rubberducky'.
-
Hello guys!! I really need some help. I have no idea about hacking. I purchase a rubber ducky as I saw that it is possible to enable developer options on an Android phone. I have an S5 that by an accident got the screen cracked and it works fine...but I dont see a single pixel on the screen...I can receive texts (I can her them). I need to recover my files, photos, etc. I craving for help. I need guide how to do that (enable developer options) as I found a software to recover the info but it needs the Developer Option enabled. I appreciate any help on this.
-
So I was testing out the 15 second rubber ducky attack and i'm not to sure how I should be doing the webserver nor what i'm doing wrong. I am very new to hacking and specially webservers, so please don't be too rough on me. So what I have done so far is just dump everything into the apache server, as I expected I didn't get the output file. Just let me know how stupid I am and where I went wrong. This is the webserver right now: http://imgur.com/5NKP0es http://imgur.com/miCNdsr http://imgur.com/Sa1Ish6 http://imgur.com/VWJqkJZ
-
HI, I try to put my helloworld.txt into an inject.bin file and if i put in java -jar duckencode.jar -i helloworld.txt it says error: unable to access jarfile duckencode.jar Sorry for my bad english :)
-
Hi guys.. Idk if this is happening beacuse I'm using windows 10, but I can't get any report from the ducky. I tried ftp, email and usb report methods from ducktollkit. . None of them worked. Also tried the simple-ducky script to create a payload and send the files back via ftp(the ftp and apache server were started automatically by the script). Please help me out! :)
-
Recently got my usb rubber ducky in the mail and it's been working great so far, except it doesn't seem to want to enter DFU mode. Unlike other people on the forum, the replay button works just fine, I've tested it multiple times. I've followed every tutorial I could find and none seem to work, I've tried it in every usb port on my machine, with and without the microsd, but even though i start holding the button down well before i plug it in, and keep it held for a while after, the ducky executes the current payload as though i wasn't, and doesn't show up in the device manager at all (win10 64x). I'm loving it so far with the base firmware but i feel like I'm missing out on a big part of the fun if i can't flash it, any help or ideas would be greatly appreciated.
-
is it possible to use the rubber ducky to turn of Windows Defender inject a rat and install it and that all in once could someone help me i am new with this (if you can could you write a script for me that is able to do this) Thanks for the help i really appreciate it Kind regards Scott
-
I haven't tested it yet, but it seems impractical to me: https://jlospinoso.github.io/infosec/usb rubber ducky/c%23/clr/wpf/.net/security/2016/11/15/usb-rubber-ducky-defeat.html https://github.com/JLospinoso/beamgun
-
Are there any cases or bags sold that can hold various Hak5 equipment like the pineapple, yagi, their cables and antennas and future equipment? Thanks
-
Hey all, I made a first pass at a rogue-USB-device defense called Beamgun. It's a tiny Windows-only service that listens for keyboards, network adapters, and usb storage devices and takes some user defined action (like locking the workstation or disabling the network adapter). Code's here: https://github.com/JLospinoso/beamgun Two blog posts on how it works (but it's pretty self explanatory): https://jlospinoso.github.io/infosec/usb rubber ducky/c%23/clr/wpf/.net/security/2016/11/15/usb-rubber-ducky-defeat.html https://jlospinoso.github.io/infosec/usb rubber ducky/lan turtle/c%23/clr/wpf/.net/security/2016/11/30/beamgun-update-poison-tap.html Y'all are an incredibly innovative group and I'd love if you absolutely attack the crap out of it. Game on!! Josh
-
So i was looking at getting a rubber ducky but i decided to test an arduino first. But i have one major problem, since im in Norway whenever the arduino runs the script it types different symbols than what i put into the script. I know this is because the arduino types using us layout. Would the rubber ducky have the same issue for me? Or could i change this or something? Any way i can fix the arduino to type in nordic layout? Thanks :)
-
Recently got my usb rubber ducky in the mail and it's been working great so far, except it doesn't seem to want to enter DFU mode. Unlike other people on the forum, the replay button works just fine, I've tested it multiple times. I've followed every tutorial I could find and none seem to work, I've tried it in every usb port on my machine, with and without the microsd, but even though i start holding the button down well before i plug it in, and keep it held for a while after, the ducky executes the current payload as though i wasn't, and doesn't show up in the device manager at all (win10 64x). I'm loving it so far with the base firmware but i feel like I'm missing out on a big part of the fun if i can't flash it, any help or ideas would be greatly appreciated.
-
Hello. I am getting the following error when running the reverse shell script: c:\decoder.vbs(2, 179) Microsoft VBScript compilation error: Expected integer constant I tried it on Windows 7 and 10 with the same result. Here is the script I am using: And here is the screen output: Any help would be much appreciated! Thanks in advance.
-
Hey guys, I know most of the post here are about attacks for the rubberducky, but I wanted to share something different with you today: a script to prevent rubberducky attacks. DuckHunt: https://github.com/pmsosa/duckhunt For now it is a project intended to protect users against Rubberducky attacks (or other automated key injection attacks). I made sure to document as much as I could in the github page so that others can keep adding and eventually it could lead to a larger discussion on how to protect users from these types of attacks. I read the previous Defense Against Ducky posts, and it seems that people had lots of ideas surrounding how to defend against these guys. I was just curious to see what would be other legitimate things one could add to protect against these :) Cheers, - Konuko II
-
I am a noob to hacking in general (everyone has to start somewhere). I had bought a Rubber Ducky, flashed TwinDuck firmware on it, and attempted to launch a payload called "Payload WiFi password grabber" by Siem (https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Payload---WiFi-password-grabber). When placing it in my Duck (nothing else inside the duck besides the payload) and clicking the replay button I am prompted with these lists of errors on the Command Prompt: goo.gl/R2xqx9 What am I doing Incorrectly? Please help.
-
so i got my usb rubberducky in the mail, and upon watching the instructionals on youtube i have to say im at a complete loss of wtf to do. im new to all this. ive tried downloading the duckencoder but the .jar file cant be opened. i also downloaded DuckyScript UDL, Duck Firmware.hex, and notepad ++. still im stumped. please help!
-
Hi, My newly acquired Ducky seems to be malfunctioning.. I am a NOOB to the ducky and need some insight from the more experienced users. The light on my Ducky stays a constant RED, I have formatted the SD card, placed another card in the injector and still the same results. I hope I did not receive a BAD DUCK. Please help. Thanks.
-
Hello guys, I've got a question considering antivirusses blocking rubber ducky payloads. I see all these .exe payloads like chromepass.exe and wirelesskeyview.exe being used in rubber duckies. Doesn't the antivirus of the attacked PC block the .exe programs when they start running from cmd? Or will it just work normally? If that is the case, this script can disable Windows Defender easily. Most PCs dont have windows defender as the only protection tho, so it is needed to disable other antivirusses, right? Most antivirusses can be shut off with the taskkill command, i tried killing my MalwareBytes and it worked: (remove " ") taskkill /f /im "Insert antivirusprogram name here.exe" Can someone help me out with this? I want to know if im just being dumb here, since all of this might not be needed. Thanks in advance
-
Hi there, Really want to buy one of each (RubberDucky, LanTurtle), but South Africa is not in the list of areas to ship to. Would be awesome to demo these things to my security pupils. Any help would be appreciated.
-
Hi.......i have a problem, hope somebody can help me! Ok,....... I have created a Reverse TCP DNS payload with MSFVenom...... Now i want to execute this File with plugging in the USB Rubber Ducky! How i got to do this? Do i have to convert my Payload with Base64? And if yes, how i could do this? Please help me!
-
Hi, I recently got a USB rubber ducky, but I'm stuck as to how to use it. I tried a hello world script but nothing showed up on the screen. I have an Asus c200 Chromebook,and tested it on that, and a windows 8 laptop. Both with now results. I just received this yesterday, and haven't had too much time to play with it (like 30 mins.) As I see it, the led blinks like its supposed to, but no result.
-
USB Rubber Ducky Tool Windows GUI for USB Rubber Ducky Description This tool was made to help beginner users of the USB Rubber Ducky create and copy payloads directly to their Ducky's MicroSD card. I decided to do this mini project since I am in an Intro C# class. I added all the features/options I could think of and tried to make is as user friendly as possible. I would love any feedback, recommendations, or tips that you have to offer! The GitHub Project Direct Download Features Select HD: Which drive the home directory for the ducky will be made.MicroSD: Which removable storage device the .bin file will be copied to.Refresh Devices: Will refresh the HD and MicroSD options.Keyboard Layout: Allows users to select keyboard layout of scripts using encoder 2.x options. Eject: Ejects the MicroSD card. Save Payload: Saves contents of messagebox to text file. Make .bin: Creates .bin based on the .txt script made using the encoder. Copy .bin: Copies .bin made to removable storage device selected. To-DO List Payload Selection: Allow users to select pre-existing payloads from the Rubber Ducky Wiki.Firmware Options: Ability to change Ducky's Firmware.Recommendations? I'll take any ideas and recommendations users may have!Screenshot
-
my usb rubber ducky came today! however there seems to be a problem.no matter what .bin i put on it. it just bugs out. opens start types JG3;]]]JG/13;]]jg++3jg3#]]]3jg/3[[=0=.[9.\'+.JG opens https://support.google.com/chrome/?p=help&ctx=keyboard#topic=3227046 goes full screen then ends. does this with all .bins i put on.
-
Does anyone know a way to continue a rubber ducky script after rebooting the Windows7 OS? I'm trying to use the Ducky as a way to automate Machine setups. One of the first things I need to do is disable UAC and change the machine name and Workgroup. Then after that I have to reboot and need the script to pickup where it last left off.
-
just got my ducky and tried to take the password of my Facebook account using chrome saved passwords. (I'm running on win 8.1 just to clarify) but this script that i tried to write doesn't seem to work. can anyone see why this seems to not work???? this is the script: DELAY 500 GUI D DELAY 500 GUI R DELAY 500 STRING chrome DELAY 500 ENTER STRING chrome://settings/passwords DELAY 500 ENTER STRING facebook DELAY 500 TAB DOWNARROW TAB ENTER TAB TAB TAB TAB TAB TAB CTRL C DELAY 500 GUI R DELAY 100 STRING notepad.exe CTRL V DELAY 100 ALT f DELAY 100 STRING s TAB TAB TAB TAB TAB TAB ENTER STRING C:\Users\Zem The Mattress\Music\ ENTER TAB TAB TAB TAB TAB TAB STRING hello ENTER
-
I created a tutorial on how to get a remote shell on any windows PC in 5 seconds using RubberDucky... enjoy! https://crowdshield.com/blog/2015/pwn-any-windows-pc-in-5-seconds-with-badusb.php
