[Help]

Hi Guys,

Where can i find a step by step tutorial on how to set-up the rubber ducky. I had formatted the duck (of course clueless on what i am doing.....) ive been searching for videos on how to setup but cannot located anything......

The wiki is a great resource for getting started: https://github.com/hak5darren/USB-Rubber-Ducky/wiki

[Rubber Ducky for passwords]

I am very new to Rubber Ducky. I would like to know can I use Rubber Ducky for passwords. I would like to put the passwords on Rubber Ducky and then use it to enter my passwords at the login screen. I currently have passwords on a usb stick and keyboard macro. Can I start using Rubber Ducky to replace the USB sticks and keyboard macros?

Thanks

You should consider more secure alternatives, this would be a very insecure method of storing passwords. In other words, if your rubber ducky is compromised so are your credentials.

[reverse shell]

Just got my first rubberducky and it quacks like a keyboard

looking forward in some serious pen testing.

im interested in the reverse shell methods

From my understanding it connects to another computers ip and port , and then opens up somekind of shell.

From the other computer it should be possible to run remote commands ,,, am I getting this correct ?

Questions :

1. Is it possible to listen on keystrokes with reverse shell ?

- If not , what other methods would work for the keystrokes, preferrably on win10 ?

2. what programs should be setup on the other end and how should they be setup ?

3. is it possible to run mimikatz trough reverse shell ?

looking forward in creating some cool payloads

1. Yes

2. Depends on what method you use to spawn the reverse shell, you have many options. You may use a simply netcat listener, a meterpreter payload handler, PowerShell empire payload handler, etc.

3. In the post-exploitation phase you could upload mimikatz, or, if you are using something like Powershell Empire to spawn the reverse shell then that functionality is built right in, and can be loaded right into memory without ever touching the disk (AV bypass).

[Can't bypass UAC?]

Hi I'm new and just got my Rubber Ducky.

Why can't I bypass UAC? Am I doing something wrong? It pops up with the UAC password prompt screen. "Do you want to allow the following program to make changes to this computer?" and then it asks for the password. Here's the code I'm using.

GUI r
DELAY 500
STRING powershell Start-Process cmd -Verb runAs
ENTER
DELAY 3000
ALT y
DELAY 500
STRING echo Admin Prompt in 5 seconds

This doesn't work either

DELAY 200
STRING cmd
DELAY 200
MENU
DELAY 100
STRING a
ENTER
DELAY 200
LEFT
ENTER

I'm running Windows 7 SP1

Did you verify the user account has Administrative privileges?

[Writing data to MicroSD for evidence]

Hey there,

My name is leo (if you didn't already convert my username to ASCII) and I've been a white hat pen tester for some time now, and just doing my first set of physical assessments and I just couldn't ignore this amazing tool (kudos!). I've already built some very powerful/useful payloads, however, I am wondering if it is possible to write data back to the MicroSD card assuming the environment we are targeting is segmented from the internet? Thanks in advance!