felux Posted February 2, 2016 Share Posted February 2, 2016 Recently I wanted to load up my ducky with the mimikatz payload found here (https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Payload---mimikatz-payload). Using the current revision of duckencode.jar available from the github downloads, I get compilation errors when attempting to encode the mimikatz payload, specifically on the line of the script that registers 'CTRL-SHIFT ENTER'. I went and reversed the .jar Encoder class and sure enough, I don't see the 'CTRL-SHIFT' keyword anywhere in there. Where'd it go? So many of the duckyscripts listed on the github wiki use this. It's a commonly used key sequence in Windows to get to the 'Run as Administrator' menu item. Am I missing something completely obvious here? Is there another route to take in this case? Appreciate the help folks! Quote Link to comment Share on other sites More sharing options...
White Light Posted February 2, 2016 Share Posted February 2, 2016 Is it not CTRL SHIFT ENTER Pre-edit: Weird, you're right. The wiki does say CTRL-SHIFT, but I've never done it that way. Quote Link to comment Share on other sites More sharing options...
unixist Posted August 19, 2016 Share Posted August 19, 2016 Hopefully I'm doing something silly, but I'm getting an error using the CTRL-SHIFT sequence. I get a compilation error, "Error on Line: X". If I remove the hyphen, like CTRL SHIFT ENTER then it compiles OK, but doesn't seem to execute the expected sequence. Quote Link to comment Share on other sites More sharing options...
unixist Posted August 19, 2016 Share Posted August 19, 2016 Instead of CTRL-SHIFT ENTER, I ended up using something like this to pop the admin UAC: MENU DELAY 300 DOWNARROW DELAY 300 ENTER Now to obfuscate the reverse shell payload I'm using to get around Defender >.< Quote Link to comment Share on other sites More sharing options...
boba.fett Posted October 23, 2016 Share Posted October 23, 2016 CONTROL-SHIFT means both keys pressed at same time. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.