Jump to content

[Question] Using the duck in VirtualBox


Recommended Posts

Hello. Has anyone gotten the duck to run payloads just a normal machine would run them using a virtual machine on VirtualBox with the default firmware? I think I tried in the past, but you had to like mount the device or something like that with the menus in VirtualBox before a USB starts working in the VM. Has anyone played around with that? How do you guys normally safely test your payloads? Thanks.

Link to comment
Share on other sites

I have been unsuccessful at getting Windows 7 and OS X payloads to work with VirtualBox. But Windows XP, Vista, Server 2003, and all the Linux Distros i have tried work just fine. VMPlayer works great for Windows 7. I would be interested to see if anyone out there has been successful at getting VirtualBox working with WIndows 7...

Link to comment
Share on other sites

When I am writing my payloads I normally only develop a step at a time(functional programming), and lots of times redirect output to notepad instead of the command prompt. When working with dangerous commands like file deletion commands I replace the deletion command with a "dir" command so It shows the files it would have deleted, and I know that the batch arguments are working correctly. If anyone does work out a good procedure to run these in a VM that would be great.

Edited by overwraith
Link to comment
Share on other sites

I'm using Oracle VM Virtual Box with a USB addon (I'm not sure atm which one or from where). For me, the duck only works on the VM if it is in full screen mode with full capture options. if it's in Windowed mode then the host (Win7) catches the script instead. Interestingly, the VM then goes to capture the MSD as I've got TwinDuck installed.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...