Jinsoku Posted March 29 Share Posted March 29 Would this play an earrape rickroll at full volume and lock the keyboard? DELAY 1000 ATTACKMODE HID CTRL 5 CTRL 5 CTRL 5 CTRL 5 CTRL 5 CTRL 5 CTRL 5 CTRL 5 CTRL 5 CTRL 5 DELAY 50 GUI r STRING https://www.youtube.com/watch?v=BT9h5ifR1tY DELAY 1000 STRING exit CRTL-ALT l Quote Link to comment Share on other sites More sharing options...
dark_pyrro Posted March 29 Share Posted March 29 Why not just try it and see what happens? I would probably increase the initial DELAY to 3000 (if you're not sure that the Ducky will enumerate on the target within the set delay). Or, use the DETECT_READY extension. Not sure what the "CTRL 5" lines do, but I guess it's for increasing volume. If so, don't count on the fact that it's "universal" (at least not if Windows is the intended target). I would probably do it in another way just to make the payload a bit more generic. 6 hours ago, Jinsoku said: STRING exit What is the payload supposed to exit from? 6 hours ago, Jinsoku said: CRTL-ALT l and 6 hours ago, Jinsoku said: lock the keyboard If the CTRL ALT combination is for trying to lock the keyboard, I'm not too sure about that. It will lock the PC at best, but to me that seems like a Linux-like keyboard shortcut to activate the lock screen, not something for Windows (that would be "GUI l" most likely). Quote Link to comment Share on other sites More sharing options...
Jinsoku Posted March 29 Author Share Posted March 29 Ok thanks. How would you write it? Quote Link to comment Share on other sites More sharing options...
dark_pyrro Posted March 29 Share Posted March 29 I'm not a user of prank payloads, but they might serve as a good starting point when learning how to script things. Look in the Hak5 GitHub repo, there are variants there of the same kind of "theme". https://github.com/hak5/usbrubberducky-payloads/tree/master/payloads/library/prank Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.