-
Posts
57 -
Joined
-
Last visited
Everything posted by V3sth4cks153
-
Hi, No, you don't need to: the script will work on the stock firmware, as it is fully self contained. Regards, V3sth4cks153
-
Hi. I think that's what you're looking for: https://forums.hak5.org/index.php?/topic/36390-payload-mac-os-x-simple-persistent-reverse-bash/ This payload uses crontab, but it works just as good ! The only problem is that it relies on a privilege escalation vulnerability in OSX Yosemite, which has been patched in OS X 10.10.5, and as far as I'm aware, it's only been tested on Yosemite. I hope this solves your issue ! V3sth4cks153
-
[Payload] OS X Root SSH Backdoor
V3sth4cks153 replied to V3sth4cks153's topic in Classic USB Rubber Ducky
Yeah ! But there still are people who won't update before a long time ! So it's still relevant... -
[Payload] OS X Root SSH Backdoor
V3sth4cks153 replied to V3sth4cks153's topic in Classic USB Rubber Ducky
The vunerability has been patched in 10.10.5 ! -
You're welcome !
-
If I'm not mistaken, this means the Ducky is unable to read the sd card... Do you have another one to try and see if it works ? I hope this help you, V3sth4cks153
-
Multiple modifier keys in keyboard layout
V3sth4cks153 replied to V3sth4cks153's topic in Classic USB Rubber Ducky
I really need help on this one... Anyone ? -
[Payload] [Mac OS X] Simple persistent reverse bash
V3sth4cks153 replied to Matto's topic in Classic USB Rubber Ducky
I tried the first payload, which uses the bash reverse shell, and it worked without any problem on my mac ! I'll try it on other macs tomorrow, and let you know how this goes... However, when trying to use the second one, which uses python, I was blocked because it uses some backslashes... I tried modifying the keyboard properties, but as I just posted here: https://forums.hak5.org/index.php?/topic/36433-multiple-modifier-keys-in-keyboard-layout/, I can't get it to work... Do you know how to use more than one modifier key in the properties file ? -
Hi. I've been trying to modify the Swiss german keyboard properties file for use with my Swiss french Mac Book Pro, and so far I've managed to make everything work, besides the backslash ( "\" ) key, because it requires both the ALT and SHIFT modifier keys, and it looks like the encoder doesn't support multiple modifier keys in keyboard properties. I came across this thread which talked about recompiling the encoder, which I don't have a clue how to do... Does anyone have an idea how to solve this problem ? Thanks, V3sth4cks153
-
[Payload] [Mac OS X] Simple persistent reverse bash
V3sth4cks153 replied to Matto's topic in Classic USB Rubber Ducky
That's so cool ! Really well done ! I'll test it first thing tomorrow ! -
[Payload] [Mac OS X] Simple persistent reverse bash
V3sth4cks153 replied to Matto's topic in Classic USB Rubber Ducky
Oh ! I understand ! So it's not a question of being more discrete then...For your problem with the arrow keys, I think it might be a NetCat issue, but I really don't know how to get around it... Don't worry, you're making yourself perfectly clear. At least for me even if English is not my native language as well ! :) -
[Payload] [Mac OS X] Simple persistent reverse bash
V3sth4cks153 replied to Matto's topic in Classic USB Rubber Ducky
Hi ! That looks really good ! I think that maybe the scripts you saw use plists for hiding purposes ? But even using crontab I think is covert enough for the average Mac user not to notice it. The problem you have may be caused by the encoding of your payload... I had some problems with language properties... For example, encoding a payload with the Swiss layout sometimes caused some special characters (<, >, and some other ones) to be swapped, but it never happened with the arrow keys. What keyboard layout are you using ? -
how do i use the VID_PID_SWAPPER?
V3sth4cks153 replied to shamwow's topic in Classic USB Rubber Ducky
You're welcome ! -
[Payload] [Mac OS X] Wallpaper changer
V3sth4cks153 replied to V3sth4cks153's topic in Classic USB Rubber Ducky
Thanks ! I'm glad you like it ! To answer your first question, it should work right away. Since the script makes the computer download an image from the Internet, all you need is an Internet connection, without any prework. I have a GitHub Repo of all the Rubber Ducky scripts I've made. You can find it right here: https://github.com/V3sth4cks153/USB-Rubber-Ducky-Scripts Of course if you want to contribute to it, feel free to do so ! -
DuckSlurp Without Powershell?
V3sth4cks153 replied to ballinhard's topic in Classic USB Rubber Ducky
You're welcome ! Tell us if it works ! I didn't test it on my side... -
DuckSlurp Without Powershell?
V3sth4cks153 replied to ballinhard's topic in Classic USB Rubber Ducky
This just made me want to make a DuckSlurp script for Mac OS X ! Here it is : https://forums.hak5.org/index.php?/topic/36324-payload-os-x-duckslurp/ EDIT: In the works I found that it's already been done ! Here: https://forums.hak5....ackground-asap/ I may try to improve it a bit but only if I get the time. -
I just stumbled upon this topic, which made me want to make a similar script, but for Mac OS X, since I couldn't find any. EDIT: In the works I found that it's already been done ! Here: https://forums.hak5.org/index.php?/topic/34697-payload-osx-run-duckslurp-shell-in-the-background-asap/ I may try to improve it a bit but only if I get the time.
-
how do i use the VID_PID_SWAPPER?
V3sth4cks153 replied to shamwow's topic in Classic USB Rubber Ducky
If I'm not mistaken, you have to take the microSD card out of the Ducky, and read it with an adapter on your computer. Then, put both the VID_PID_SWAPPER.exe and VIDPID.txt on the microSD card, and run the VID_PID_SWAPPER.exe. Basically what happens is the VID_PID_SWAPPER.exe pics a random VID/PID combination from the VIDPID.txt file, which is loaded with about 350 different combinations (so, no, you don't have to edit it). Once you run the exe, a VIDPID.bin file should be created on the microSD card, and that's what tells the Ducky what VID and PID to use. Remember to run the EXE ON the microSD card, or else it won't do anything ! V3sth4cks153 -
how do i use the VID_PID_SWAPPER?
V3sth4cks153 replied to shamwow's topic in Classic USB Rubber Ducky
I think that's what you're looking for: https://github.com/midnitesnake/USB-Rubber-Ducky/tree/master/Firmware/Utils/VID_PID_SWAPPER_1.1 I hope this helps you ! V3sth4cks153