[Question] dumping hashes on windows

[rubberduckyuser]

Hello Forums,

i've thinking a lot on how to get windows hashes with the rubberducky (or teensy) really easy by simply plugging in the ducky (or teensy). i've came around this blog:

http://labofapenetrationtester.blogspot.de/2012/05/teensy-usb-hid-for-penetration-testers.html

but, here is the issue: it does not work with german os'es or french os'es or something.

i have the following issues in my head which i want to discuss:

first, i would like to convert the ps script to the rubber-ducky language, i assume rubber duck cannot handle ps.

second, i would like to build a complete offline-version, without using gmail, tinypost or something.

in fact, i just want to plug in the rubberducky and store the hashes, but, where? without using a online-connection to somewhere.

other question is, is there something around to do this? i've seen the poll for the password-stealer, but i'm not sure if there is any work on this project right now.

ok, here is the final question:

how would you do hash-dumping with rubber-ducky?

haven fun

[overwraith]

Sounds like a cool activity. What kinds of hashes are you going to be collecting? I know that we already have a SAM collecting payload. We also have a few payloads developed for some of the Nirsoft password recovery tools, those however are easily shot down by antivirus.

I think I can see how they made the command prompt appear small like that, will be updating hide command window script soon.

cmd /K \"mode con:COLS=15 LINES=1"

Edited May 21, 2013 by overwraith

[overwraith]

Found a somewhat related post in the forums.

http://forums.hak5.org/index.php?/topic/26866-info-duck-sauce-v01/

looks like they were trying to bring the functionality of that tool over to ducky.