In need of Updated help

[MuddDuck]

Hello

I just got my rubber ducky and I'm trying to get my first pay load to work. I am trying to the use the Porn Payload mainly because it's not going to do any real damage and I can test with it. My problem is that everytime I try to run my CMD to get it going I run into an error.

This is my CMD - java -jar duckencoder.jar -l resources\us.properties -i porn.txt -o inject.bin

I then get an error saying that Java is not a recognized internal or external command.

I have tried to do some research on this but everything that i'm finding is about 3 years out of date and not working for me.

Any help would be greatly appreciated

Running Windows 7 HP

[overwraith]

I think what is probably happening is either you do not have java installed, or you have not added java to the system path. The path being the more likely, you need to go: My Computer -> System Properties -> Advanced System Settings -> Environmental variables, Ignore the variable "PATH" in the top box, and go to the bottom list box that should have the variable "Path". You need to edit this variable, the list is semicolon ";" delimited. So you will add something like ;C:\wherever\Java\bin; making sure that between consecutive paths there are semicolons. I would press the end key to get to the end of the list. If you cannot find where java is installed, you likely know what the problem is. Tell us if this works.

Edited May 10, 2014 by overwraith

[MuddDuck]

Ok so I did what you said that that worked. I went to encode the following payload:

REM add delay to ensure Windows can add appropriate driver

DELAY 3000

GUI R

DELAY 500

STRING cmd

DELAY 500

ENTER

DELAY 2000

STRING cd desktop

ENTER

DELAY 250

STRING mkdir Porn

DELAY 250

bitsadmin /transfer NETFX /download /priority normal http://images.gutefr...80263/0_big.jpg c:\Users\%username%\Desktop\Porn\yougottrolled.png

DELAY 5000

ALT-F4

DELAY 500

GUI R

STRING Porn

ENTER

DELAY 1000

ENTER

DELAY 500

CTRL-A

CTRL-V

DELAY 250

CTRL-V

DELAY 250

CTRL-V

DELAY 250

CTRL-V

DELAY 250

CTRL-V

DELAY 250

CTRL-V

DELAY 250

CTRL-V

DELAY 250

CTRL-V

DELAY 250

CTRL-V

DELAY 250

CTRL-V

DELAY 450

ALT-F4

using the CMD:

F:

java -jar duckencoder.jar -l resources\us.properties -i porn.txt -o inject.bin

I ejected the drive and inserted the SD into the duck and plugged it in. Windows installed the drive but nothing happened. so i then took the SD out and plugged it back in and tried to do something more simple so I copied this:

REM

DELAY 300

GUI R

DELAY 200

STRING notepad

ENTER

DELAY 500

STRING This is my first Ducky Script

ENTER

and tried to encode it with:

java -jar duckencoder.jar -l resources\us.properties -i first.txt -o inject.bin

when i plugged this back into the duck and the computer i got a solid red light on the duck and nothing on the computer. Did i mess something up?

[MuddDuck]

As i kept playing around with it i found that my .txt and .rtf files are gone, my duckencode.jar is gone and my encode.jar is "corrupted" so I have no idea what happened. I'm going to try to start from the beginning here i guess

[MuddDuck]

Ok so not to keep changing everything but i was able to remove everything and start from scratch. I removed all but the duckencode.jar file, the inject.bin file, and my Hello.txt file on the SD card.

I set everything up and tranferred the SD card to the Duck plugged it in and now i get a green light for a few seconds and then it goes red.... hmmm

[MuddDuck]

.... and now my SD card is completely corrupt.... :(

[MuddDuck]

Formatted card remade the .txt and tried to encode it and run it through the duck. I got a red light again when i plug the SD card back into the computer it's completely erased. so i'm going to stop now until i get a response before i break something (or should i say since i broke something)

[overwraith]

Make sure you do that Windows "Safe removal" thing, otherwise you will have problems.

Edited May 10, 2014 by overwraith

[MuddDuck]

Yea I made sure to do that. I just couldn't put it down and wait like i said i was going to. I kept screwing with it and got it working :)

This may be an odd observation but is there a reason why the time stamps are completely wrong for the posts?

It shows that i started this thread yesterday when it was actually earlier today.

Edited May 10, 2014 by MuddDuck

[overwraith]

It looks fine on my computer. I am not sure.