Hi.
I'm just trying some payloads but seems that some characters don't are well interpreted by power shell.
I has try to encode with the following tools:
encoder from https://github.com/midnitesnake/usb-rubber-ducky
encoderr from : http://ducktoolkit-411.rhcloud.com/Encoder.jsp
I have windows 7 with spanish international keyboard. (and ofc ourse, when I encode I select spanish)
For instance if I try run the Dump local wdigest passwords from memory using mimikatz, when rubby duck arrives to:
for /f %d in ('wmic volume get driveletter^, label ^| findstr "DUCKY"') do set duck=%d
at the terminal appears:
for -f %d in )´wmic volume get driveletter&, label &Ç findstr ¨DUCKY¨´= do set duck¡%d
so special characters like " ^, |, (, ), =, @ " seems that don't work fine...
Any idea how can I fix this?
Thanks!