Jump to content

imaging memory


Recommended Posts

Is it possible to create a payload for the USB rubber ducky that can use the dd command to image the memory of a screen locked windows machine. What sort of limitations could one expect such as speed of acquisition and the amount of memory that could be acquired.

Any info would be appreciated

Link to comment
Share on other sites

There are several major issues here.

1. dd is a Linux tool. Without something like Cygwin it would not be possible to execute it at all.

2. The ducky ONLY types out keystrokes.

3. The only thing you can do at a screen locked windows machine is unlock it by logging in (with the Ducky that is).

If you can do it with a keyboard, then you can do it with a Ducky. If you can't dump memory from a locked screen with the keyboard, then you can't with a ducky either.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Create New...