Jump to content
Shad0wChick46

BB with ducky script not working

Recommended Posts

So ive been trying to run ducky script in a bash bunny payload but as soon as it hits the ducky script it stops.

LED SETUP

GET SWITCH_POSITION

ATTACKMODE HID

LED ATTACK

RUN WIN notepad.exe

QUACK DELAY 300

QUACK STRING (\___/)

QUACK ENTER

QUACK DELAY 300

QUACK STRING (='.'=)

QUACK ENTER

QUACK DELAY 300

QUACK STRING (")_(")

QUACK DELAY 300

 

I cant figure out the problem

Share this post


Link to post
Share on other sites
#make a payload.txt containing this
 
LED SETUP
ATTACKMODE HID STORAGE
GET SWITCH_POSITION
LED ATTACK
if [ -f "/root/udisk/payloads/${SWITCH_POSITION}/ducky_script.txt" ]; then
        QUACK ${SWITCH_POSITION}/ducky_script.txt
        LED FINISH
else
    LED FAIL
    echo "Unable to load ducky_script.txt" >> /root/debuglog.txt
        exit 1
fi
 
#then make a ducky_script.txt containing this
 
DELAY 2000
GUI r
DELAY 1000
STRING notepad.exe
DELAY 300
STRING (\___/)
ENTER
DELAY 300
STRING (='.'=)
ENTER
DELAY 300
STRING (")_(")
DELAY 300
 
#put them both in the same switch folder and try it out ;)
#it's the long way to do it but I like it cause if it fails I get a debug log :)
Edited by D31M0Z

Share this post


Link to post
Share on other sites

I don't see how user error can be at fault here so don't worry on that front.

The payload/duck script run flawless on mine.

Try factory resetting your bunny and retrying.

 

Edited by D31M0Z

Share this post


Link to post
Share on other sites

Try this: 

 

QUACK switch2/duck.txt

where your duck script is now

then put your other duck script in a file called duck.txt

 

If that works and executes your duckyscript, just factory reset your bashbunny, had the same problem with mine not recognizing some duckyscripts.

 

C1PH3R

"Don't look at the branch of the problem look at the root (C1PH3R)"

Edited by C1PH3R

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...