[Vbscript Lessons]

Its kind of hard to find decent .vbs sites these days, as most everything is now using powershell and .net/visual studio. MSDN probably has some documentation, but for the most part its just a lot of googling and research from other sites, forums, mailing lists, etc.

http://www.google.com/search?hl=en&newwindow=1&safe=off&q=%22.vbs%22+scripting+tutorials&oq=%22.vbs%22+scripting+tutorials&aq=f&aqi=&aql=&gs_sm=3&gs_upl=2004714l2011913l0l2012213l5l5l0l0l0l0l179l397l4.1l5l0

However, if you want to do .net, VisualBASIC, and some other stuff, check out Planet Source Code. http://www.planetsourcecode.com/

Thanks for the reply! I will take a look...

~TjeuvanBussel

[Vbscript Lessons]

Hey all!

I'm doing a school project with a friend, and I'm looking for some good VBScript lessons, to get a better understanding of it, with VBScript I mean the files you save as *.vbs, not the website stuff, if you know a good place, please comment!

~TjeuvanBussel

[Ettercap Arp Poisoning, Dns Spoofing]

It could have something to do with your network card or drivers not being compatible with Backtrack.

How are you running Backtrack, in a VM or physical hardware?

Also make sure, all your software is current!

My BackTrack machine is a virtual machine, with a bridged connection, it had its own IP, and has no problems with running servers, Metasploit and handling Meterpreter shells, but since my first succes, the DNS spoofing won't work...

~TjeuvanBussel

[Ettercap Arp Poisoning, Dns Spoofing]

Hey all!

I am still kinda new to the networking and BackTrack stuff, so sometimes I walk into problems, and now I habe one. I am trying to spoof the dns of a website with Ettercap, and send it to my BackTrack machine running SET, just for educational purposes, so I edited the etter.dns file with my own IP adresses, and saved it, and after a few tries, it worked. But when I tried it again after dinner, with the same command (ettercap -T -q -i eth1 -P dns_spoof -M arp // //) it started as normal, but when I tried to visit the spoofed site on my other pc, it didn't want to connect, so I tried Google.com, but still no connection. So I stopped ettercap, and BAM it worked. So I have been searching for a solution, but I didn't find anything or anyone that had the same problem. Can anyone help me with this?

~TjeuvanBussel

[Set Global]

Thanks for the reply, I will try forwarding port 4444, I indeed use reverse TCP. I thought it was a bad idea to forward port 80, but my virtual machine has it's own IP, and the virtual machine doesn't have important files so I tried it. I'll let you know if it worked.

~TjeuvanBussel

[Set Global]

Hey guys!

So, I have forwarded port 80 on my router (bad idea I know) to my VirtualBox's IP adress which runs BackTrack 5, and I would like to make my SET globally accesible. When I go to the global IP of my router, I do get the page I set up with SET, 'Java Required', and I do get the question if I want to run the Java-applet, and if I click run, I can see the process in the Task Manager, but I dont get a meterpreter in my BackTrack box... Can anyone help me with this? I know my explanation isn't that clear, but you can ask me questions about the parts you don't understand/

~TjeuvanBussel

[[Question] Convert Inject.bin Back To Text]

This sounds like an intersting idea. Once the new firmware is released iducke.com will need to be revamped. I will add this feature with that rerelease.

Nice! Thanks for the reply, I already am waiting for the 2.0 firmware for my Dutch keyboard, which implements the ALT key wrong. I was just thinking of deleting all the files, but I will keep them now I've read your reply.

~TjeuvanBussel

EDIT: My friend, who is co-owner of our Ducky, says that I have to say we are big fans of ur iducke.com website, and never even tried to encode with the Java file. ~TjeuvanBussel && ~edjefy

[[Payload] Merry Christmas Ducky Script!]

Hey all!

I've wrote an Merry Christmas script that changes your wallpaper to a downloaded christmas wallpaper. I hope you like it!

It is mainly for Windows 7, because Windows XP doesn't have PowerShell.

GUI d
DELAY 300
GUI r
DELAY 300
STRING powershell
DELAY 200
ENTER
DELAY 5000
STRING cd c:\
ENTER
DELAY 300
STRING [IO.Directory]::CreateDirectory("c:\kerst")
ENTER
DELAY 300
STRING cd kerst
ENTER
DELAY 500
STRING $clnt = new-object System.Net.WebClient
ENTER
DELAY 200
STRING $clnt | gm d*
DELAY 300
ENTER
STRING $url = "http://www.designtreasure.com/wp-content/uploads/2010/11/Merry%20Christmas%20%202010%20Wallpaper%2027.jpg"
DELAY 300
ENTER
DELAY 300
STRING $file = "C:\kerst\USB_duck_image.jpg"
ENTER
DELAY 300
STRING $clnt.DownloadFile($url,$file)
ENTER
DELAY 300
ENTER
DELAY 500
STRING exit
ENTER
DELAY 500
GUI r
DELAY 300
STRING C:\kerst
ENTER
DELAY 300
STRING u
DELAY 200
MENU
STRING b
ENTER
DELAY 500
ALT F4
DELAY 300
ALT F4
DELAY 500
GUI d

~TjeuvanBussel

[[Question] Convert Inject.bin Back To Text]

unless you downloaded the inject.bin's from some shady site or person.

I would just keep a copy of the original source, and name the .bins accordingly and renaming them to inject.bin when testing that payload

sorry for not answering your question.

Thanks for your reply! I code with the online iducke.com, and now I also do save copies of my programs.

~TjeuvanBussel

[[Question] Convert Inject.bin Back To Text]

Hey all,

Just got my USB Rubber Ducky today, I´m very happy with it, but it doesn´t recognize the SD card that came with it, but i´ve put in another.

Now I have 30 inject.bin files, and I would like to convert them back to text, to see what they do and to store them, is there any way I can do this?

~TjeuvanBussel