-
Notifications
You must be signed in to change notification settings - Fork 1.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Create Desktop Geese.txt #449
base: master
Are you sure you want to change the base?
Conversation
It runs ~30 desktop geese at the same time; this will severely impact your computer, not just your performance (nearly impossible to do anything), but will drain the battery very quickly. To close all of the geese, press and hold the ESC key until the geese close.
@@ -0,0 +1,217 @@ | |||
REM TITLE Desktop Gese |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This file is placed incorrectly inside of the directory. Please remove it.
@@ -0,0 +1,217 @@ | |||
REM TITLE Desktop Gese |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Your directory and file name cannot include space. Use -
or _
instead of spaces.
STRING powershell | ||
ENTER | ||
DELAY 500 | ||
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I se you are repeating the same thing over and over, consider using a FUNCTION
this will let you clean up the code and make it easier to repeat. For example,
FUNCTION OPEN_PROGRAM()
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
ENTER
DELAY 500
ENTER
END_FUNCTION
OPENPROGRAM()
You can also attach this to a REPEAT
for example,
REPEAT 17 OPEN_PROGRAM()
You could also use a loop.
VAR $times = 17
WHILE ( $times > 0 )
OPEN_PROGRAM()
$times = ($times - 1)
END_WHILE
@@ -0,0 +1,217 @@ | |||
REM TITLE Desktop Gese | |||
REM AUTHOR Fly Fisher | |||
REM DESCRIPTION This payload will copy files from the Desktop Goose application, it should be stored on ducky |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please include any files the user needs to have on their ducky or the location where they can install them. Keep in mind compiled binary's are not allowed, if you have any compiled code please include the source code.
STRING cmd | ||
SHIFT-ENTER | ||
DELAY 1000 | ||
STRING copy D:\Read me! Honk.txt |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Not everyone's ducky will identify as their D://
everyone's storage set up will vary. Consider using more dynamic code for locating the ducky drive. For example,
Get-WmiObject -Class Win32_LogicalDisk | Where-Object {$_.VolumeName -eq "DUCKY"} | ForEach-Object { $_.DeviceID }
This will search for drives with the label "DUCKY" and lists it drive letter. You can also add a DEFINE
at the start of your payload for users who aren't using the default label "DUCKY" for example,
DEFINE #DUCKY_DRIVE_LABEL DUCKY
STRINGLN Get-WmiObject -Class Win32_LogicalDisk | Where-Object {$_.VolumeName -eq "#DUCKY_DRIVE_LABEL"} | ForEach-Object { $_.DeviceID }
This is a payload that will run ~30 desktop geese at once, doing this will just about crash your computer, making it nearly impossible to do much at all. To close it, press and hold the ESC key.
It requires people to download and extract the desktop goose files to the root of their ducky compatible device.