Jump to content

no42

Dedicated Members
 View Profile  See their activity

  • Posts

    925

  • Joined

  • Last visited

  • Days Won

    17

 Content Type 

Posts posted by no42

    [Payload] Browser Password Payloads

    in Classic USB Rubber Ducky

    Posted

    Midnight snake showed me an improvement to the command line drive finding code;
    J:\>for /f %d in ('wmic volume get driveletter^, label ^| findstr "DUCKY"') do set myd=%d

J:\>echo %myd%
J:

    This was part of what one of his firmware versions would automatically type in. So instead of using my for loop, we can use this loop which looks for a volume labeled "DUCKY". This means we don't need the text file on the root of the drive anymore.

    Just remember to label the sdcard to "DUCKY" for this to work.....

    their not labelled by default (if they are its usually some pseudo-random code eg "23AF-3DDE")

    [BugReport] Spanish support for keyboard

    in Suggestions / Bug reports

    Posted · Edited by midnitesnake

    Your help is welcomed!

    General Instructions are below:

    Make sure your using the latest encoder (currently v2.2).

    You best option is download the ducky-decode svn

    inside the svn is the Folder

     Encoder/v2/resources

    This is the location of all the language maps.

    keyboard.properties is the main file, it maps ascii characters to their HID values. Do not edit this file.

    You probably now want to read a non-english language french (fr.properties)/italian(it.properties)/german (de.properties) to see how special characters are mapped.

    An example from de.properties:

    ISO_8859_1_A7 = KEY3, MODIFIER_SHIFT

    This website http://www.charset.org/charactersets.php is good for finding your character map and ISO codes.

    Basically, you need to create a new file es.properties, and build lines similar to: 

    ISO_8859_1_code = key_located_on_US_QWERTY_keyboard
ISO_8859_1_code = key_x, modifierkey_y

    It may be a long process, but do this for all the characters you need.

    You can probably cheat and start using it.properties - and make necessary changes!

    Edit:

    If a character is missing a warning is prompted when you run the encoder. Example:

    Char not found:ASCII_72 
Char not found:ASCII_70 
Char not found:ASCII_6F

    This will help identify gaps in keyboard mappings

    Also, when your sure you've got a working es.properties add it on the ducky-decode website under Issues, and label as Patch - it will then be added into the main repository.

    This is a brief post, if you need clarification, ask questions, and I'll edit this post to make things clearer.

    [Firmware] Question about Custom Firmware?

    in Classic USB Rubber Ducky

    Posted · Edited by midnitesnake

    USB transfer rates are known to be slow, because we're limited to using the open-source SPI protocol.

    The SD-transfer protocol is faster but this is proprietary, so we would have to

    1. spend a lot of money for the SD code
    2. spend time integrating the code into the ducky's firmware (ducky has a small amount of memory? no guarantees)
    3. charge all you ducky followers a lot more for the firmware updates

    For now the slow speeds are acceptable, considering the firmware is opensource & freeware.

    As to wiring up the button - this was in the demo firmware, quite easily to bring back. UPDATE: See c_duck_v2_S0002.hex on ducky-decode

    The driver delay only happens the first time you insert in Windows - its the way windows handles drivers - cant be helped! Version 2 firmware supports easy manipulation of the VID & PID, if you find one that doesn't require a driver-install, please feedback.

    Different payloads by key-press combo's - not sure how the ducky would detect this??? currently the ducky only detects keyboard LED status: this is how we detect all the *_LOCK keys.

    My child wants Arduino for Christmas!

    in Applications & Coding

    Posted

    Little bits kit from adafruit.

    http://adafruit.com/products/745

    Good starting point for kids... less of the programming, if she finds this too easy jump to

    Hummingbird is a bit pricy, but aimed at kids http://www.hummingbirdkit.com/

    Another alternative is the raspberry pi http://www.adafruit.com/category/105

    Adafruit has a good section on using the GPIO pins for different projects, theres scratch for introductory programming, and she'll be learning linux. Best of all this is relatively quite cheap

    Special adafruit electonics distro for Pi: http://learn.adafruit.com/adafruit-raspberry-pi-educational-linux-distro

    Tutorials: http://learn.adafruit.com/category/raspberry-pi

    [BugReport] Bad Micro SD with my rubber ducky deluxe Pack

    in Suggestions / Bug reports

    Posted

    If you've re-flashed the Ducky and tried other sdcards, and the sdcards are known to function correctly. The sdcard reader on the ducky might be at fault (I personally have never encountered this problem before, theres always a first time)

    I just want to check that the sdcard is inserted, and that the end of the card is flush with the end of the ducky. As the firmware cant read the sdcard (what the red led means).

    If in doubt.... Contact the hak5 shop shop@hak5.org subject:"Exchange USB Rubber Ducky Request", they're very good at exchanges.

    The gang was all at CES, i think they have returned???

    You might have a small delay, but they're always quick on dealing with problems, I had to exchange my first duck(no leds, no dfu-mode - completely dead duck!) the turn around time for exchange was 4 working days.

    3 or more simultaneous key presses on ducky

    in Questions

    Posted · Edited by midnitesnake

    Dnucna found that 2x modifiers can be OR'd together, currently supported are CTRL-ALT and CTRL-SHIFT (as of Duck Encoder V2.2)

    this allows CTRL-ATL DEL, and CTRL-SHIFT Enter

                                    } else if (instruction[0].equals("CTRL-ALT")) {
                                        if (instruction.length != 1) {
                                                file.add(strInstrToByte(instruction[1]));
                                                file.add((byte) (strToByte(keyboardProps.getProperty("MODIFIERKEY_CTRL"))
                                                                | strToByte(keyboardProps.getProperty("MODIFIERKEY_ALT"))));
                                        } else {
                                                continue;
                                        }
                                } else if (instruction[0].equals("CTRL-SHIFT")) {
                                        if (instruction.length != 1) {
                                                file.add(strInstrToByte(instruction[1]));
                                                file.add((byte) (strToByte(keyboardProps.getProperty("MODIFIERKEY_CTRL"))
                                                                | strToByte(keyboardProps.getProperty("MODIFIERKEY_SHIFT"))));
                                        } else {
                                                continue;
                                        }

    More research with a usb sniffer is needed for other combo's.


    [Payload] MissDirection

    in Classic USB Rubber Ducky

    Posted · Edited by midnitesnake

    CTRL-SHIFT Enter is for Vista + (including Win 7/8/2008/2012)

    It tells the system you want to run the program as Administrator (even if your Administrator), this is becuase of UAC (User Access Control), if you get the UAC box, confirming you wish to load said program as admin, this needs to be followed with

    ALT Y

    This is Vista +, NOT XP or below.

    [Question] Secure SD Duck?

    in Classic USB Rubber Ducky

    Posted · Edited by midnitesnake

    Sadly - looks like the answer is no.

    Atmel Codebase:

    bool sd_mmc_spi_wr_protect(void)

This function returns the write protected status of the memory.

Only used by memory removal with a HARDWARE SPECIFIC write protected detection ! 
The user must unplug the memory to change this write protected status, which cannot be for a SD_MMC.
Returns:false -> the memory is not write-protected (always) /

    Looks like write-protect is permanently disabled on sdcards

    Kingston USB

    in Everything Else

    Posted

    If its not the U3 model, then you have the DTSecure one.

    From Kingston:

    I kindly inform that we are unable to remove software from DTVP. It is Firmware partition and it can not be removed. We do not recommend this product for bootable purposes. It is a security USB rather than anything else.

    We apologise for inconveniences.

    Question about Teensy USB

    in Everything Else

    Posted

    Basically its Irongeek's PHUKED library.

    What do you mean make one with an 8GB USB?

    You either have a Teensy, Arduino or a Ducky.

    Think best idea is invest in a USB Rubber Ducky, double the price :( but quadruple the fun :) (the more you buy, the cheaper we can make them)

    • HID Attacks
    • Mass Storage - based on size of sdcard (easily upgradable)
    • Composite Device
    • Bypass Device Control S/W
    • Flexible Firmware (reprogrammable)
    • Totally Programable
    • Multi-Lingual (Keyboard layout is different with languages/countries)
×
×
  • Create New...