Street Posted November 29, 2021 Share Posted November 29, 2021 The code in the ducky pdf manual gets cut off, and some of it looks like it would be important. Here is one such example: 1 REM Clear the Run 1 history and exit 2 STRING powershell "Remove-ItemProperty -Path 'HKCU:\Software\Microsoft\Windows\CurrentVersi 3 ENTER 4 STRING exit 5 ENTER Quote Link to comment Share on other sites More sharing options...
dark_pyrro Posted November 29, 2021 Share Posted November 29, 2021 Is this just a "request for change" or do you want to know what the rest of that line is? What part of the Ducky "eBook" is that (I guess you are referring to the pdf that is available in the shop, just like the one for the Key Croc)? Is it in the Mr Robot part (more specifically the "CLEARING YOUR TRACKS" section)? In that case it's probably available on the help site. I haven't examined the content of the eBook and the help web site, but I guess they are more or less the same. Previous printed Hak5 books have been very much like the documentation web site content before. Quote Link to comment Share on other sites More sharing options...
Street Posted December 5, 2021 Author Share Posted December 5, 2021 The problem is throughout the free pdf manual. Quote Link to comment Share on other sites More sharing options...
Darren Kitchen Posted December 6, 2021 Share Posted December 6, 2021 The full script should read: DELAY 3000 GUI r DELAY 100 STRING powershell “Remove-ItemProperty -Path ‘HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU’ -Name ‘*’ -ErrorAction SilentlyContinue” ENTER It comes from the Sample Payloads section, which is also available at https://help.hak5.org/usb-rubber-ducky-1/the-ducky-script-language/sample-payloads It looks like the PDF which is generated from the online version truncates text from the code block 😞 1 Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.