overwraith Posted February 20, 2013 Posted February 20, 2013 I just wrote a payload on my Windows 7 desktop 64 bit computer, and took my ducky to another Windows 7 32 bit computer that I own, and the payload didn't execute on the 32 bit machine. It executes fine on the 64 bit version. The number of bits shouldn't be a problem though, because the ducky is just a keyboard. Does anyone have any idea whats going on? I am running twin duck firmware with the swappable VID/PID number. I also know for a fact that the payload is flawlessly coded. Quote
mreidiv Posted February 20, 2013 Posted February 20, 2013 (edited) I just wrote a payload on my Windows 7 desktop 64 bit computer, and took my ducky to another Windows 7 32 bit computer that I own, and the payload didn't execute on the 32 bit machine. It executes fine on the 64 bit version. The number of bits shouldn't be a problem though, because the ducky is just a keyboard. Does anyone have any idea whats going on? I am running twin duck firmware with the swappable VID/PID number. I also know for a fact that the payload is flawlessly coded. Are you sure that both boxes have the same dependants installed IE, Home, pro, enterprise: Each verson includes different pre installed programs etc. What is the actual error and/or what happens on one box that the other does not. Edited February 20, 2013 by mreidiv Quote
overwraith Posted February 20, 2013 Author Posted February 20, 2013 (edited) The only programs I was using was the cmd.exe and internet explorer. The payload was a modified version of the mobile tabs payload I implemented: REM MOBILETABS.TXT BEGINS REM HIDE COMMAND WINDOW CONTROL ESCAPE STRING cmd /Q /D /T:7F /F:OFF /V:OFF /K DELAY 500 ENTER DELAY 750 ALT SPACE STRING M DOWNARROW REPEAT 100 ENTER REM DELETE THE SCRIPT IF IT ALREADY EXISTS STRING DEL /Q MobileTabs.vbs ENTER REM VB SCRIPT FOUND AT: REM http://www.vistaheads.com/forums/microsoft-public-internetexplorer-general/438407-command-line-open-several-websites-multiple-tabs.htmlinternetexplorer REM INPUT FILE MobileTabs.vbs STRING copy con MobileTabs.vbs ENTER STRING on error resume next ENTER STRING navOpenInBackgroundTab = &h1000 ENTER STRING set oIE = CreateObject("InternetExplorer.Application") ENTER STRING Set args = WScript.Arguments ENTER STRING oIE.Navigate2 args.Item(0) ENTER STRING for intx = 1 to args.count ENTER STRING oIE.Navigate2 args.Item(intx), navOpenInBackgroundTab ENTER STRING next ENTER STRING oIE.Visible = true ENTER CONTROL Z ENTER REM LATER WILL TYPE THE WEBSITES TO A TEXT FILE, REM AND SEND THE FILE TO THE VB SCRIPT REM RUN THE VB SCRIPT TO LAUNCH INTERNET EXPLORER STRING MobileTabs.vbs "http://www.google.com/" "http://mwomercs.com/" "http://hak5.org/" "http://forums.hak5.org/index.php?/forum/56-usb-rubber-ducky/" ENTER Edited February 20, 2013 by overwraith Quote
mreidiv Posted February 20, 2013 Posted February 20, 2013 (edited) The only programs I was using was the cmd.exe and internet explorer. The payload was a modified version of the mobile tabs payload I implemented: REM MOBILETABS.TXT BEGINS REM HIDE COMMAND WINDOW CONTROL ESCAPE STRING cmd /Q /D /T:7F /F:OFF /V:OFF /K DELAY 500 ENTER DELAY 750 ALT SPACE STRING M DOWNARROW REPEAT 100 ENTER REM DELETE THE SCRIPT IF IT ALREADY EXISTS STRING DEL /Q MobileTabs.vbs ENTER REM VB SCRIPT FOUND AT: REM http://www.vistaheads.com/forums/microsoft-public-internetexplorer-general/438407-command-line-open-several-websites-multiple-tabs.htmlinternetexplorer REM INPUT FILE MobileTabs.vbs STRING copy con MobileTabs.vbs ENTER STRING on error resume next ENTER STRING navOpenInBackgroundTab = &h1000 ENTER STRING set oIE = CreateObject("InternetExplorer.Application") ENTER STRING Set args = WScript.Arguments ENTER STRING oIE.Navigate2 args.Item(0) ENTER STRING for intx = 1 to args.count ENTER STRING oIE.Navigate2 args.Item(intx), navOpenInBackgroundTab ENTER STRING next ENTER STRING oIE.Visible = true ENTER CONTROL Z ENTER REM LATER WILL TYPE THE WEBSITES TO A TEXT FILE, REM AND SEND THE FILE TO THE VB SCRIPT REM RUN THE VB SCRIPT TO LAUNCH INTERNET EXPLORER STRING MobileTabs.vbs "http://www.google.com/" "http://mwomercs.com/" "http://hak5.org/" "http://forums.hak5.org"/index.php?/forum/56-usb-rubber-ducky/ ENTER this might be of some help.... The VBScript interpreter (cscript.exe/wscript.exe) comes in two flavors on a 64-bit version of Windows: a 32-bit version and a 64-bit version. The 32-bit version can create and use 32-bit COM components only, and the 64-bit version can create and use only 64-bit COM components. By default, .vbs files are associated with the 64-bit version. You COM component is most likely a 32-bit one, hence the error. http://stackoverflow.com/questions/2429477/cannot-use-createobject-from-vb-scripts-on-windows-7 Edited February 20, 2013 by mreidiv Quote
overwraith Posted February 20, 2013 Author Posted February 20, 2013 Actually, the ducky wouldn't even run. Quote
Solution overwraith Posted February 20, 2013 Author Solution Posted February 20, 2013 I think I figured it out. Ducky inject.bin didn't get copied to the root of the SD card. I must not have executed the batch file to move it, or there was a ducky compile error which caused the duck to not run. Sorry for the false alarm. Quote
mreidiv Posted February 20, 2013 Posted February 20, 2013 no problem glad you got it working B) Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.