Jscott3717 Posted October 21, 2020 Share Posted October 21, 2020 I have written several scripts for the keycroc and when the MATCH is triggered the payload fails because it not typing my STRING correctly or as I have typed it in the file??!! I have used multiple keyboards and the one I am currently using is a logitech wireless model k360 This is driving me nuts Any comment or suggestions would be appreciated Thank you Link to comment Share on other sites More sharing options...
RootJunky Posted October 22, 2020 Share Posted October 22, 2020 6 hours ago, Jscott3717 said: I have written several scripts for the keycroc and when the MATCH is triggered the payload fails because it not typing my STRING correctly or as I have typed it in the file??!! I have used multiple keyboards and the one I am currently using is a logitech wireless model k360 This is driving me nuts Any comment or suggestions would be appreciated Thank you please run my croc info script and give me the output. also can you link one of the scripts you are trying to run on the keycroc. Also what does your config.txt file look like. Having these would be very helpful for trouble shooting. I will try and help if i can. Link to comment Share on other sites More sharing options...
Irukandji Posted October 22, 2020 Share Posted October 22, 2020 Love *CAPS* titles /s Link to comment Share on other sites More sharing options...
Jscott3717 Posted October 22, 2020 Author Share Posted October 22, 2020 I am running the latest firmware 1.3_510. If you need anything else let me know Thanks Link to comment Share on other sites More sharing options...
RootJunky Posted October 22, 2020 Share Posted October 22, 2020 ok i think i see your problem. You have to remember that the Keycroc is a linux device and some commands are seen as bash on that device when typed with Q STRING in your powershell window. you should try putting those commands that mess up inside of "" or () also you can escape the linux bash with / in front of the part of the sting that messes up. good luck let me know if that works for you. Link to comment Share on other sites More sharing options...
Irukandji Posted October 22, 2020 Share Posted October 22, 2020 Sorry about before. But I don't about powershell. The network configuration looks all right. Link to comment Share on other sites More sharing options...
Jscott3717 Posted October 22, 2020 Author Share Posted October 22, 2020 RootJunky. Thank you for your reply. I have tried the script with and without “” already. I have not tried the () or the /. I will not be at a computer for a few hours as I am working. Is it possible for you to post an example line from my script showing your method of syntax?? Thank you Link to comment Share on other sites More sharing options...
Jscott3717 Posted October 22, 2020 Author Share Posted October 22, 2020 Jtyle6. All good Link to comment Share on other sites More sharing options...
RootJunky Posted October 22, 2020 Share Posted October 22, 2020 7 hours ago, Jscott3717 said: RootJunky. Thank you for your reply. I have tried the script with and without “” already. I have not tried the () or the /. I will not be at a computer for a few hours as I am working. Is it possible for you to post an example line from my script showing your method of syntax?? Thank you MATCH back Q GUI r Q STRING powershell Q ENTER Q STRING Start-Process "powershell" -Verb RunAs Q ENTER Q DELAY 10000 Q KEYCODE 00,00,50 Q ENTER Q STRING \$Password = Read-Host -AsSecureString p4ssw0rd Here is my script that i added a couple changes to. I gave you the wrong escape before. It is the forward slash \ as you can see in the payload above. The \ escapes the $ which is run on the linux match as a bash command and now with the \ is ignored and types it to the powershell window instead. you will need the \ before every $ in your script. Q KEYCODE 00,00,50 is the left arrow button 🙂 auto admin permission. Link to comment Share on other sites More sharing options...
Jscott3717 Posted October 22, 2020 Author Share Posted October 22, 2020 Thank you sir I will try this after class Much appreciated Link to comment Share on other sites More sharing options...
RootJunky Posted October 25, 2020 Share Posted October 25, 2020 On 10/22/2020 at 5:39 PM, Jscott3717 said: Thank you sir I will try this after class Much appreciated well how's it going did that work? Also just a note the numlock has to be on on your keyboard for these and any payload to work correctly if you didnt already know. Link to comment Share on other sites More sharing options...
Jscott3717 Posted October 26, 2020 Author Share Posted October 26, 2020 so It did not work initially And I looked into the numberlock issue also That was not the problem HOWEVER the problem did happen to be related to the numbers I noticed after slowing the payload down that every time I tried to execute a number the script would fail It would not output any numbers on the screen After further investigation, this problem was related to the fact that I was using the corsair (problem keyboard) to write the script in Notepad...... If i type the numbers in the script using the logitech keyboard INSTEAD of the corsair the script will execute as written Strange lol Link to comment Share on other sites More sharing options...
Jscott3717 Posted October 26, 2020 Author Share Posted October 26, 2020 I am now having issue with getting the QUACK LOCK UNLOCK commands to operate Also the WAIT_FOR_KEYBOARD_INACTIVITY is not operating either Any suggestions for these? Thanks Link to comment Share on other sites More sharing options...
RootJunky Posted October 26, 2020 Share Posted October 26, 2020 1 hour ago, Jscott3717 said: I am now having issue with getting the QUACK LOCK UNLOCK commands to operate Also the WAIT_FOR_KEYBOARD_INACTIVITY is not operating either Any suggestions for these? Thanks QUACK LOCK is a now bug and doesnt work at this time. WAIT_FOR_KEYBOARD_INACTIVITY 10 This command requires the interval at the end like above in seconds. Link to comment Share on other sites More sharing options...
Jscott3717 Posted October 27, 2020 Author Share Posted October 27, 2020 I have tried the wait for keyboard inactivity with as much as 300. I can't get it to work. I am.inserting it after the MATCH line is this the correct spot for it? Link to comment Share on other sites More sharing options...
Jscott3717 Posted October 27, 2020 Author Share Posted October 27, 2020 MATCH Z WAIT_FOR_KEYBOARD_INACTIVITY 300 Like this???? Or does it need a Q? Link to comment Share on other sites More sharing options...
RootJunky Posted October 27, 2020 Share Posted October 27, 2020 17 hours ago, Jscott3717 said: MATCH Z WAIT_FOR_KEYBOARD_INACTIVITY 300 Like this???? Or does it need a Q? you got it right but I myself have not fully tested this feature. also what firmware version are you on. Link to comment Share on other sites More sharing options...
Jscott3717 Posted October 27, 2020 Author Share Posted October 27, 2020 The latest firmware Link to comment Share on other sites More sharing options...
Aaron Outhier Posted March 3, 2021 Share Posted March 3, 2021 On 10/22/2020 at 12:58 PM, RootJunky said: It is the forward slash \ as you can see in the payload above. Umm, you do realize that forward slash is / and back slash is \ right? Or have the two been switched since the 1980s? Link to comment Share on other sites More sharing options...
Aaron Outhier Posted March 3, 2021 Share Posted March 3, 2021 In my studies, I learned long ago, that the forward and back slashes were often confused. Someone explained how to keep them straight: We type from left to right. If you imaging a man running from the left side of your screen to right, he can lean back "\" or forward "/". If I had a nickel for every time I have heard someone say h t t p colon backslash backslash, I'd spend much more time at the nickel arcade, and less time correcting them... Apologies. I don't intend to offend. There are just too many folks spending their "valentimes" day at the "liberry", in my personal opinion. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.