Jump to content

Ducky and Desktop Goose help


Recommended Posts

So as a fun prank I would like to try to make a script to download and run Desktop Goose onto a PC and execute it. My only issue is I don't have much powershell experience. I'm aiming to download the file, extract it to their Documents folder or somewhere similar, and run the .exe. I'm not sure exactly what to google as when I have usually you need a URL to file, but when I go to download it, the URL when hovering the button is "javascript:void(0);". Could someone maybe point me in the right direction how I could start this process?

Link to post
Share on other sites
  • 2 weeks later...

To make this barebones as possible, here is a working example but in cURL (note: this is a POST request -- it checks if the CSRF cookie value matches up with what is POSTed):

curl 'https://samperson.itch.io/desktop-goose/file/1957163' -H 'Cookie: itchio_token=a' --data-raw 'csrf_token=a'

If successful, this would return a JSON response. This includes the key named 'url' and 'external'. The 'url' key will have a value containing the 'generated' valid URL to the download (it does expire). You would then use that URL to download the archive.

Do note that as itch does use Cloudflare, it is possible for the request to be blocked due to missing headers such as the user agent.

 

This is only one piece of the puzzle. As this is a USB Rubber Ducky, a script that does all of that either has to be typed out or you'll have to use the 'twin duck' firmware (for simultaneous [slow] mass storage) and create the software / script so that the payload is way more sped up (by directly executing it [on the USB Rubber Ducky] rather than typing it out).

Edited by uintdev
Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...