Jump to content

1n5aN1aC

Active Members
 View Profile  See their activity

  • Posts

    42

  • Joined

  • Last visited

 Content Type 

Posts posted by 1n5aN1aC

    [Version 1] Back And Keyboard_leds

    in Classic USB Rubber Ducky

    Posted

    so does anyone know why it doesn't seem to work?

    I'm using arduino v22 (latest)

    latest teensyduino

    and have tried mostly everything i can think of.

    The documentation for the teensy says there is a variable named "keyboard_leds" which will update to show the current num, caps, scroll keys pressed, but it refuses to compile with that anywhere in the code.

    Was it changed in a recent version or something, and the documentation just not updated?

    [Version 1] Disabling Standard Defences

    in Classic USB Rubber Ducky

    Posted

    Mouse movements are problematic. First of all you have no idea where the mouse is beginning, mouse movements are relative (unless you simulate a touchscreen) and second you have no idea of the screen resolution, so if you're aiming for the bottom right corner to hit the task tray, you have a problem, unless you tell the mouse to go impossibly long distances to make sure it gets there.

    Even if you get the cursor to the far bottom right of the screen, you have no idea how many icons might be in the tray, which one is which, where the expand button might be if icons are hidden (XP), where the up button is to reveal more icons, etc. Essentially there's so many variables and zero feedback, it'd be next to impossible.

    THAT'S why you have a script with AHK, or some such that views the screen, searches for a specific picture (the expand icon), and it tells the teensy where to click, and which anti-virus it is (based off which icon) so the teensy knows where to click (the script tells it where) then what arrow keys to press to get to the disable.....

    [Version 1] Router Settings

    in Classic USB Rubber Ducky

    Posted

    Yes, but the actual page on the router for changing setting can vary SOO much. whatever you want to do will most likly be on a different tab even than another router, but it's definatly possible, but will only work on a small amount of routers, unless you made a HUGE database (which is very impractical, there are so many routers, and even different firmware versions...)

    [Version 1] Disabling Standard Defences

    in Classic USB Rubber Ducky

    Posted

    Should note that some of the scanners would most likely have signatures for kill-scripts like these.

    Of course- That's what I'm trying to do. The script should be absolutely HARMLESS! The script should tell the teensy (duck) where to click to disable it. That way, it can't be blocked. But you need the script to tell it where to click....

    So I still don't know how I would tell the teensy where to click/what to type from a script on the computer.....

    [Version 1] Disabling Standard Defences

    in Classic USB Rubber Ducky

    Posted · Edited by 1n5aN1aC

    Why not just use the Ducky to activate the EXE script, and make the EXE script do everything?

    Well, I was just thinking that this way, the script (exe) is not doing ANYTHING bad, and therefore there was no chance of it getting nuked by AV...... Anyways, even if I did do that, I would want some way to tell the teensy I'm done, do the next thing, or whatever. (at least that's my thoughts.)

    [Version 1] Disabling Standard Defences

    in Classic USB Rubber Ducky

    Posted

    Okay, well it's obvious to me that if you want to do things that are very nefarious, that you're going to have to disable anti-virus/firewalls. Which should be very easy since we can mimic the user. All we have to do is right-click the tray icon, click "disable," then click yes, right?

    Not really, for one, you can't know where the tray icon is going to be, since it "hides tray icons" (oh i hate that....). For two, there are hundreds of anti-virus/firewall products.

    I can easily write a simple script with something like AHK to view the screen and find where the "expand tray icons" button is, and even find the screen coordinates of a certain part of a picture (therefore finding out where the tray icon is, so we can click it.)

    The problem is, we need to have a way to send data from an application back to the teensy, weather we tell the teensy to disable it for us (better than using a script) or we need to tell it when we're done doing something. So We need to figure out a way to send information back to the teensy from withing anything (a shell script, an AHK script, or other things.)

    I'm sure it's possible, but once this is figured out, it's fairly trivial to build a database of all the anti-virus/firewall products, and what to do on the tray menu to disable them.

    Here is a really simple AHK script to disable Defense+ on COMODO firewall:

    DetectHiddenWindows, On

ShowComodoTrayMenu()
Sleep 500
Send {Down 3}{Right}{Up}{Enter}
TrayTip, Defense+ Security Level, Disabled
Return

ShowComodoTrayMenu() {
 WinGet, W, List, ahk_class Afx:00400000:0
 hWnd := W%W%
 PostMessage, 10045, 335,0x206,, ahk_id %hWnd% ; Right Click down
 PostMessage, 10045, 335,0x205,, ahk_id %hWnd% ; Right Click Up
}

    This could easily be expanded for "all" products (although I would prefer the program just tell the teensy where to click, so the program is only viewing the screen, and not caught by anti-virus itself.)

    [Version 1] Duckhunt Usb Attack Prevention Tool

    in Classic USB Rubber Ducky

    Posted

    Yeah, I'm sure there's SOMETHING, but it may be too "low-level" to detect it, so yeah, I'm not sure either- If I get one, i'll look into it & compare all the stuff in Right-click-on-drive > Properties > Hardware > Properties > Details and such stuff, but I actually doubt that there will be something unique, but there might just be something there, you never know..... (I don't like to call something totally blocked unless it's COMPLETELY blocked & isn't too user-inconvenient. {I mean, you can always go farther on security....} )

×
×
  • Create New...