bmintz

Here's the same script, but with the same enhancements as s1tl suggested and placed in a code tag: DEFAULT_DELAY 20 DELAY 3000 GUI SPACE STRING TERMINAL ENTER STRING curl --create-dirs -LOso '~/Library/Application Support/OSX Background/' http://example.com/IMAGE.jpg ENTER REM **Might want to adjust this depending on the size of the image/speed of the server** DELAY 1800 STRING osascript -e 'tell application “Finder” to set desktop picture to POSIX file “~/Library/Application Support/OSX Background/IMAGE.jpg”’ ENTER STRING killall Dock ENTER STRING exit ENTER Nice job BTW! I don't have a Mac, so I don't know if that curl command will work on there. Please let me know.

I think all of the source code for what you're after is under Firmware/Source/Composite_Duck - Multi on the GitHub repo. As for not bricking the Ducky, I understand your caution. AFAIK (and I could be wrong on this one) that if something goes wrong, the Ducky can always be re-flashed, but if you're still nervous after making your modifications, send me the compiled .hex firmware and I'll see if I can get it working on my Ducky.

If you haven't already flashed duck_v2.1.hex, there's instructions on the wiki. Once you've done that, put the 2 byte VID followed by the 2 byte PID in a file called vidpid.bin on the root of your SD card. In GNU/Linux, you can do that easily: perl -e 'print pack "H*", "17f60709"' > /path/to/sdcard/vidpid.bin

I think Kon-Boot will do the job very well, in this case. When booted from a USB drive, Kon-Boot will let you log in to any Windows account without a password. It then provides privilege escalation which you could automate with the Ducky. Cheers!