Jump to content

no42

Dedicated Members
  • Posts

    925
  • Joined

  • Last visited

  • Days Won

    17

Everything posted by no42

  1. If you've re-flashed the Ducky and tried other sdcards, and the sdcards are known to function correctly. The sdcard reader on the ducky might be at fault (I personally have never encountered this problem before, theres always a first time) I just want to check that the sdcard is inserted, and that the end of the card is flush with the end of the ducky. As the firmware cant read the sdcard (what the red led means). If in doubt.... Contact the hak5 shop shop@hak5.org subject:"Exchange USB Rubber Ducky Request", they're very good at exchanges. The gang was all at CES, i think they have returned??? You might have a small delay, but they're always quick on dealing with problems, I had to exchange my first duck(no leds, no dfu-mode - completely dead duck!) the turn around time for exchange was 4 working days.
  2. Just watch the ducky forum, and the Firmware/Encoder development on http://code.google.com/p/ducky-decode. I think for 4+ keystrokes we have to change the way the whole process works. Unsual combo, is that for DeepFreeze?
  3. Not sure how accurate but i typically use: http://en.wikipedia.org/wiki/Comparison_of_web_server_software
  4. Dnucna found that 2x modifiers can be OR'd together, currently supported are CTRL-ALT and CTRL-SHIFT (as of Duck Encoder V2.2) this allows CTRL-ATL DEL, and CTRL-SHIFT Enter } else if (instruction[0].equals("CTRL-ALT")) { if (instruction.length != 1) { file.add(strInstrToByte(instruction[1])); file.add((byte) (strToByte(keyboardProps.getProperty("MODIFIERKEY_CTRL")) | strToByte(keyboardProps.getProperty("MODIFIERKEY_ALT")))); } else { continue; } } else if (instruction[0].equals("CTRL-SHIFT")) { if (instruction.length != 1) { file.add(strInstrToByte(instruction[1])); file.add((byte) (strToByte(keyboardProps.getProperty("MODIFIERKEY_CTRL")) | strToByte(keyboardProps.getProperty("MODIFIERKEY_SHIFT")))); } else { continue; } More research with a usb sniffer is needed for other combo's.
  5. CTRL-SHIFT Enter is for Vista + (including Win 7/8/2008/2012) It tells the system you want to run the program as Administrator (even if your Administrator), this is becuase of UAC (User Access Control), if you get the UAC box, confirming you wish to load said program as admin, this needs to be followed with ALT Y This is Vista +, NOT XP or below.
  6. For those interested the project website is: http://ubertooth.sourceforge.net/usage/start/ it contains basic information, to get you started, its very community driven, so I would additionally join the mailing list. https://lists.sourceforge.net/lists/listinfo/ubertooth-general
  7. The bus pirate is good for talking to chips http://dangerousprototypes.com/docs/Bus_Pirate
  8. You may want to look at the following: The Car Kracker http://www.gadgetgangster.com/news/54/556 OpenXC (Ford Cars) http://openxcplatform.com/
  9. Sadly - looks like the answer is no. Atmel Codebase: bool sd_mmc_spi_wr_protect(void) This function returns the write protected status of the memory. Only used by memory removal with a HARDWARE SPECIFIC write protected detection ! The user must unplug the memory to change this write protected status, which cannot be for a SD_MMC. Returns:false -> the memory is not write-protected (always) / Looks like write-protect is permanently disabled on sdcards
  10. If its not the U3 model, then you have the DTSecure one. From Kingston:
  11. Does the following work (Linux)? java -jar encoder.jar -l ./resources/de.properties -i myfile.txt -o inject.bin Windows: java -jar encoder.jar -l resources\de.properties -i myfile.txt -o inject.bin
  12. cant you use http://www.kingston.com/us/support/technical/downloads?product=dtiu3&filename=U3update to alter the U3 partition????
  13. Should work fine on stock firmware! Encoder and firmware are separate developments - this takes advantage of encoder enhancements.
  14. Are you getting any errors? Have you tried this, if so is the page source available? Basically, its replacing <p> with <p>my text .... if there is no <p> tag, it wont do the replace http://www.irongeek.com/i.php?page=backtrack-3-man/etterfilter
  15. You can always try http://extundelete.sourceforge.net There is no guarantee, this will be successful! Fairly good walkthrough http://garbers.co.za/2010/12/15/recovering-recently-deleted-files-from-an-ext3ext4-with-journaling-partition/
  16. Basically its Irongeek's PHUKED library. What do you mean make one with an 8GB USB? You either have a Teensy, Arduino or a Ducky. Think best idea is invest in a USB Rubber Ducky, double the price :( but quadruple the fun :) (the more you buy, the cheaper we can make them) HID Attacks Mass Storage - based on size of sdcard (easily upgradable) Composite Device Bypass Device Control S/W Flexible Firmware (reprogrammable) Totally Programable Multi-Lingual (Keyboard layout is different with languages/countries)
  17. Processors are normally 3v, so Im inclined to go for the 3V3
  18. you must be using an old version of metasploit, they use postgres now.
  19. Irongeek has a simple tutorial for replacing images http://www.irongeek.com/i.php/i.php?page=security/ettercapfilter and theres upside down ternet http://www.triki.ca/index.php?option=com_content&view=article&id=60&Itemid=92
  20. Make sure there are no spaces at the end of the line. I get, the following: Char not found:ASCII_72 Char not found:ASCII_70 Char not found:ASCII_6F Char not found:ASCII_77 Char not found:ASCII_65 Char not found:ASCII_72 Char not found:ASCII_73 Char not found:ASCII_68 Char not found:ASCII_65 This is because the ru.properties file is not finished, its just a start. Like the Italian keyboard post, you need to help build a working ru.properties file
  21. You definitely need to move to Encoder 2.2 and build a valid it.properties, then the command will be: java -jar encoder.jar -l ./resources/it.properties -i myfile.txt -o inject.bin Inorder to generate a proper Italian Ducky Binary Payload.
  22. Make sure your using the latest encoder (currently v2.2). I think your our first Italian so ill help walk you through creating a new file it.properties for Italian keyboards You best option is download the ducky-decode svn inside the svn is the Folder Encoder/v2/resources This is the location of all the language maps. keyboard.properties is the main file, it maps ascii characters to their HID values. Do not edit this file. You probably now want to read a non-english language french/spanish/german to see how special characters are mapped. An example from de.properties: ISO_8859_1_A7 = KEY3, MODIFIER_SHIFT This website http://www.charset.org/charactersets.php is good for finding your character map and ISO codes. Basically, you need to create a new file it.properties, and build the ISO_8859_1_code = key_located_on_US_QWERTY_keyboard It may be a long process, but do this for all the characters you need. This is a brief post, if you need clarification, ask questions, and I'll edit this post to make things clearer.
  23. Ok. Here we go: Mass storage and HID load at the same time HID wont fire until users lights one of the following LEDs: CAPS/NUM/SCROLL Lock. - Still Only 1x payload inject.bin Hopefully, have safeties to prevent script, reloading mid-injection if special key is involved in Ducky script. http://code.google.com/p/ducky-decode/downloads/detail?name=c_duck_v2_S001.hex&can=2&q= After injection, Duck should return to default state. Post feedback here.
×
×
  • Create New...