Jump to content

MB60893

Active Members
  • Posts

    205
  • Joined

  • Last visited

  • Days Won

    3

Posts posted by MB60893

  1. @e-Euler A question I have frequently asked!

    It depends on what you want to do. For example, the USB Rubber Ducky is based off an Arduino Teensy platform, which is typically programmed in C.

    If you're interested in making hardware, check out Arduino type solutions and PICAXE microcontroller chips.

    If you want to go a step up from here, you could check out Field Programmable Gate Arrays (FPGAs.) Think of these like "liquid" hardware, in the sense that you program them using Verilog or VHDL, and the physical gates on the chip become a piece of hardware you create. It's kind of difficult to explain, but Ben Heck had a great example on his show where he turned an FPGA into a GameBoy, not by actually simulating a GameBoy's software like an emulator does, but actually by making the FPGA work physically like the electronics of the GameBoy of old.

    I wouldn't blame you if FPGA's are too complicated though... Personally, I would recommend using an Arduino for custom-hardware solutions as they are quick to use, and easily scalable to meet your needs. If you need a more powerful base, I'd recommend looking at using a Raspberry Pi and the GPIO pins on board, which can be used just like the pins on an Arduino. Additionally, I have done numerous projects with a library for C called "WiringPi", which gives you the ability to use Arduino commands in your C code for the GPIO pins! If that is still too complicated, Python also has some easy GPIO examples for the Raspberry Pi, although you will substantially compromise performance of the solution for easy coding in return.

    I hope this helps! If you have any other queries, feel free to write them below or DM me. ^_^

    -MB60893.

  2. I don't know about opening apps and stuff, but on the logitech ultrathin portable keyboard cover for iPad, you could move around the screen using the "command" and "left"/"right" arrows on the keyboard. Something like "command+3" or "Function+3" (don't include the +) opens the search feature, and I think you can open apps that way.

  3. I do not off the top of my head. I know that such commands are possible with a bluetooth keyboard (such as the Logitech bluetooth keyboards for iPad, which you can press combinations of buttons for using the "command" key and letters on the keyboard, which would work I assume by using the "GUI" button syntax for the USB rubber ducky/Bash Bunny.)

    • Like 1
  4. On 7/17/2017 at 10:17 AM, Dave-ee Jones said:

    By the way, for those interested, you can use YUMI multiboot to load OS images onto your USB, and add more later on. It's pretty good - and I've customised the menu a bit as well. Looks quite nice.

    Mix that in with Hiren's Boot CD (HBCD) and you have a pretty powerful multiboot USB. 

    Just thought I would post this as this forum post has almost 4000 views - so people may be looking for an answer or something..

    Almost thought this part of the forum was dead! I check it from month-to-month... 

     

    Let me be clear: I don’t have the answer at this stage. But I have an idea of what you can do.

     

    Search for booting an ISO or mounting a file system folder as the root directory and then booting like that. It may potentially work. I know Hirens had some clever work arounds for the Mini Windows XP Distribution. I’d start there.

     

     EDIT: I also see that pirating groups such as (Generation2 from a quick web search) have managed to get multiple Windows installations to work off of an “All In One” USB ISO image. I imagine this could potentially have a solution for what you are trying to do... Although I cannot endorse downloading the ISO for the more than questionable legality of what such a group is doing.

     

    Hope you find a solution... will be very interested to hear if you do!

    (and yes, I know this was posted in 2017. Multipass usbs are just so great though!)

  5. See if you can potentially find a mirror that will allow you to download the files more quickly. I’ve also found that having a decent wireless card or adapter can significantly improve performance. In other words, don’t use a crappy wifi dongle to download stuff. It just makes you want to start pulling teeth.

  6. 4 hours ago, Foxtrot said:

    The TETRA only does a/b/c/n.

    Thanks @Foxtrot, I was already aware of the 802.11 a/b/g/n support. 

    I'm interested by the fact the Pineapple doesn't support AC WiFi. A bit of a deal breaker at this stage...

    @Darren Kitchen Are there any plans in the works for a pineapple that supports AC in the near future??

    Many thanks,

    -MB60893.

  7. I don't expect you'll be making something like the Orion Wrist Computer in Chuck, but if you were to make a wrist-PC, it would have to be based something preferably no bigger than 15cm x 8cm. I don't have a tablet to contribute, but I have made a rather interesting discovery of this device: http://cicret.com/wordpress/

    It projects an Android Phone's screen onto your arm, allowing you to control it from your wrist.

    Hope you find this interesting!! :)

    -MB60893.

  8. What platform are you developing this on? It says that it can't find the MSFPayload and the MSFEncode files. These two files are part of the metasploit suite, meaning you need to use an operating system such as Kali Linux that has the metasploit suite already installed. It is hard to compile this on any other platform other than Kali, so I suggest you make a virtual machine with Kali Linux, and then try compiling the duckyscript.

  9. Hi,

    Program.bat may be pointing to the wrong folder or directory. Just check your path (e.g. "E:\bin\") is correct, or if your hex file is located in the correct directory as well. Also, batch files have a problem with recognising spaces in path names, so quotes are required for anything with spaces. An example would be with the old "Documents and Settings" Folder on Windows XP. E.g. "C:\Documents and Settings\" that will most likely work.

    Cheers.

  10. You need to know the process name (e.g. for Microsoft Security Essentials, process is "msseces.exe" in task manager) and if it requires administrative privileges to kill the task. You can then proceed to do this with the cmd command

    'taskkill /id "msseces.exe" /f /t'
    
    That will kill the given process. If you need admin privileges, you need to make the rubber ducky start cmd with administrator privileges. See examples at USBRubberDucky.com.

    NOTE: Some AV's are persistent. It may benefit you trying to open a given AV using the keyboard, then navigating to "Realtime Protection" turning that off, then once the script has executed, turn Realtime Protection back on again.

  11. I don't know about XBOX as such, but the Ducky does work on the Wii gaming console. I tried it with a ducky script on the Wii Message board, and it did type, but it does miss characters. There needs to be a small, maybe 200 millisecond delay between all characters. Easy enough to implement.

  12. Yes, you can. By default, I am a windows user, but it should be easy enough to pull up a terminal, then use WGet to retrieve the file from a server, say dropbox or some other file-sharing service. After that, you should be able to install/run the file from the terminal.

    Good Luck!

    MB60893.

  13. That sucks. Would be better if a new Duck was released, honestly Oil, it would be amazing if you worked in conjunction with Hak5 to make this new Duck a reality. You obviously know what your talking about.

    I agree with Lavanoid. If you look at the Arduino, you can actually find an EEPROM on most boards. If you wanted to create a ducky with the ability of the EEPROM, that might be the way to start. I know the Arduino Leonardo automatically works with USB type A connections, so maybe have a look at that.

  14. How about using EEPROMs instead of relying on Micro SD Cards?

    I tried out some innocuous scripts at an internet cafe two days ago. Their machines had AV which scanned the Duck. It didn't stop the Duck sending keystrokes, but it did wipe the volume name off the Duck and thus prevent the payload succeeding.

    This wouldn't happen with an EEPROM.

    Hmm. My only concern would be how customisable the device would be... Good idea though, I'll look into it!

  15. Actually, think about it a little more deeply. Yes - Android is mostly Java, but don't forget that it's also Linux. If your device is rooted, you can place a binary in /system/xbin then just chmod it. This will allow you to run it from the Terminal Emulator. Look at Busybox for Android, I highly doupt it's written in Java. I think that to compile a binary for Android, you will need the NDK (or was it the ADK?) since it provides the ability to compile binaries for a device.

    On the other hand, as long as a compiler knows what architecture to compile for (such as Arm 7 Neon, for example), it should work.

    I don't want a program written in Java. If a duck encoder was written as a Java app for Android, you'd have a activity, a GUI etc. A CLI is most preferred. The dsploit team have managed to get the metasploit framework (msf) running on Android, which is mostly written in Ruby.

    I agree with you about the "Java vs C", Java's speed is noticeable in some cases, such as the fact that Java isn't quick enough to relay high volume's of traffic so it tends to drop packets. If you haven't checked out dsploits github repository, I highly recommend that you do. The issue in the repository named "Dsploit Core?" goes into detail about this stuff.

    Back on topic however, still would be great if someone ports the encoder to C. I think Androids fastboot utility is written in C and someone on xda developer's managed to compile it for Android so we were able to use fastboot in conjunction with USB OTG to flash other devices through the terminal emulator program.

    I do think it is possible to compile C as a binary for Android.

    Thank you for the response :)

    No problems. I see what you mean about Android, and I wasn't aware about Metasploit being on Android. I guess because of this there should be a way to port the duckencoder. I don't know much C, but if I was to go and create a duckencoder, I'd want to make sure I could first write to the SD card, maybe using an SD card adapter with the OTG adapter... I don't know otherwise. Play around and you will eventually get something I'm sure!

    All the best, Lavanoid.

    MB60893.

×
×
  • Create New...