Troubleshooting issues

[m00nbyt3]

After trying flashing in 5 diferent SD cards, it was impossible for me to be able to make my WUD work. When I create or modify any file directly form Windows, the SD randomly crash and it can be used again till I flash the ino again.
Also, I dont know hot to send commands via key or runpayload, it keeps saying FileNotFound or MISSING ARGS, no matter what I write in the endpoint.
I think theres a litte bit of info measing, something like a setup and first use tutorial should be added to the redme, if not users with no such a big experience as me will be a bit lost and frustrated.

[tobozo]

hey @m00nbyt3 thanks for your feedback.

I understand debugging on a USB dongle without serial console can be frustrating.
Luckily it's also a good study for practising troubleshooting skills (and in my case excercising patience) so we're not at a total loss 😉

FileNotFound: forgot to upload SPIFFS ?

MISSING ARGS: it's probably a consequence of the previous problem (missing files in SPIFFS).

[j1t077]

At first I pass as the partner m00nbyt3. Then download the modified fork I uploaded it without problems. The windows to which I connect the WUD-Ducky and recognizes it as keyboard (HID), as SD card and creates the Wifi WUD-01. But when I run a Payload it tells me "NOT FOUND". What am I doing wrong? Do you have to put any command before the Payload? Assuming I have it at the root of the SD card, it would run like this: http://192.168.4.1/payload.txt
??
Sorry for my bad English, I had to use google translate

Thanks.

[tobozo]

hello

Payload filename on the SD card must contain quack e.g. quack_blah.txt or my_payload_quack.txt.

https://github.com/tobozo/WUD-Ducky/blob/main/data/index.htm#L110

Sorry about the minimalist web UI, contributions are welcome :-)

[j1t077]

Thanks a lot.

Thanks a lot. While waiting for an answer I read the code and saw a "quack", and I understood that it was in the address bar, but I could not find how to use it.

Thank you for your reply. When the holidays are over, I'll wear it again. Happy holidays to all. P.S: I hope to have some useful ideas and to be able to contribute to this project.

Thank you very much for your effort.

[j1t077]

Then this would be the execution: http://192.168.4.1/runpayload?file=quack_payload.txt

But the txt is correct? It wouldn't be a.bin

[tobozo]

I'm not sure what you mean with .bin, ducky scripts are in txt format as in the example.

[j1t077]

Sorry, it was my mistake, I have other types of usb that work with.bin files.

In the end I couldn't hold on and I tried what you tell me.

It works like this: http://192.168.4.1/runpayload?file=/run_notepad.quack.txt If we do not put the "/" always gives us error "FILE NOEXISTS".

And if they try to run it like this: http://192.168.4.1/runpayload/run_notepad.quack.txt the error it gives us is "FileNotFound.

So the right way to execute them is: http://192.168.4.1/runpayload?file=/run_notepad.quack.txt
or if you have them in folders it would be: http://192.168.4.1/runpayload?file=/FOLDER/run_notepad.quack.txt

Thank you very much for your help. I hope this will help the other people who are looking for a solution to this.

[j1t077]

I forget, to send the keystrokes is like this: http://192.168.4.1/key?=Keystrokes_to_send

[Compr0mzd]

I tried everything but couldn't make it to work. The WEB UI was recognizing the file in the flash but each time the SD card was plugged i couldn't see the content of it.

[GippokratOA]

Hi, I tried to work with this back in November, but I stopped at the point that I could not figure out how to run a payload. Now I can see that new comments have appeared here. I tried solutions from j1t077 but it doesn't work for me. It's just that "/ name_of_payload" appears in the browser window, and nothing happens on the target PC. May be I'm an idiot and do something wrong?

[GippokratOA]

The same happens with keystrokes

[tobozo]

hi everyone on this thread, sorry about the minimalistic web UI and the code mess.

Indeed the current configuration has a few issues and unintuitive behaviours, and the lack of debug interface can be very frustrating.

Good news is the espressif sdk has matured and most USB examples are now working, so I'll try to rewrite the whole app using the official USB library coming with arduino-esp32-2.0.2.

The MSC implementation may be a bit slower, but it will allow to introduce absolute mouse positioning via ducky scripts.

This has been quite successful so far, here's the WUD-Ducky drawing a space invaders in paint:

draw_invader.mp4

Sooo the web UI needs to be improved but with all those upcoming task I don't have any time left for that, if any of you's want to contribute to the HTML/JS part it'll be warmly welcome :-)

@GippokratOA seeing the file name in your browser tab means that the ducky script was executed successfully, the one you ran is for KDE/Linux and hasn't been tested elsewhere, maybe you're on Windows or MacOS and this is why it had no effect ?

[GippokratOA]

Well, i tried it on windows.. but what about "key"? It doesn't work for me too. Tomorrow I'll try it on my linux laptop and write about result.

[GippokratOA]

Nope, it doesn't work on linux. Something can be wrong with my esp32. I thought about this because in my windows device manager this device doesn't determined as hid device. It looked like i have no driver.

[tobozo]

I've pushed the ongoing work on a new branch,
Web UI allows to switch from SD to SPIFFS, but everything related to the ducky script interpretor is currently broken.

Good news is it's not necessary to use the magnet anymore to flash the device while in debug mode so it'll be faster to test fix tomorrow.

[j1t077]

hi everyone on this thread, sorry about the minimalistic web UI and the code mess.

Indeed the current configuration has a few issues and unintuitive behaviours, and the lack of debug interface can be very frustrating.

Good news is the espressif sdk has matured and most USB examples are now working, so I'll try to rewrite the whole app using the official USB library coming with arduino-esp32-2.0.2.

The MSC implementation may be a bit slower, but it will allow to introduce absolute mouse positioning via ducky scripts.

This has been quite successful so far, here's the WUD-Ducky drawing a space invaders in paint:
draw_invader.mp4

Sooo the web UI needs to be improved but with all those upcoming task I don't have any time left for that, if any of you's want to contribute to the HTML/JS part it'll be warmly welcome :-)

@GippokratOA seeing the file name in your browser tab means that the ducky script was executed successfully, the one you ran is for KDE/Linux and hasn't been tested elsewhere, maybe you're on Windows or MacOS and this is why it had no effect ?

Good morning Tobozo.

How can I contribute to the project?
I have a Web interface practically finished and working. How should I do to integrate it into the project?
I'm using the second version of your project. And where I should put my contribution in the archive, and how I should put it. I haven't programmed for 10 years and it's the first time I'd be involved in anything. Thanks very much.

[tobozo]

@j1t077 apologies for the late answer and thanks for offering your contribution

The contents from the index.html file has been moved into the index.h file so it can never be accidentally overwritten by SPIFFS operations.

The declaration is currently using some kind of heredoc syntax (don't know the exact name), I did this because I was becoming lazy to upload both the sketch and the data folder on every iteration.

Random thought: if the index.hml size exceeds 16KB we'll have to think about gzipping it..

const char* index_html = R"indexHTML(

<!-- put your HTML code here -->

)indexHTML";

Any other asset should be left in the /data folder and uploaded to SPIFFS with arduino sketch data uploader utility.

Whenever you're satisfied with the results, just commit the changes to the secondary branch on your fork and submit a pull request, then we'll discuss the changes in the PR comments section before merging.

[j1t077]

Tobozo. Step by step you could tell me how I do it. Thanks a lot.

[j1t077]

Tell me if the FORK has been successfully uploaded. if not you will have to tell me how I upload it. Thanks a lot.

[tobozo]

@j1t077 I can see the new branch on your fork, but github won't let me merge.

Let's try the other way.

Apply the following steps on your own esp32-2.0.2 branch ( https://github.com/j1t077/WUD-Ducky/tree/arduino-esp32-2.0.2 )

For each non binary file you modified:

• Open the file in editing mode from the web UI (e.g. edit index.h )
• paste your new code
• scroll down
• give a description to your commit (e.g. "Added CSS directives")
• click on "propose changes"

For each binary file you modified (e.g. favicons):

• delete the file
• re-upload it using the "upload files" dropdown menu

I understand it can be a struggle to use git, so I can eventually import your changes manually, but I don't like doing that as it removes the contributor from history.

[j1t077]

Tanks Tobozo.

I think it's already uploaded correctly. I have another question. as I delete the FORK of version 1, which I do not understand why it went up like this. Or you have to leave it at that.?

[j1t077]

I forgot. In kali linux it detects the SD card and you can upload files and run the Scripts from it. I imagine on other Linux OS as well. But ": "end the command.
For example: if we say to write an address: https://xxxxxx.xxx when you finish typing https, it breaks the line and finishes the command, it does not write the rest.

[tobozo]

thanks for your contribution 👍

you can safely delete your fork now that the changes have been merged

I can reproduce the : and Press issues, strtok_r is probably a bad choice and the payload runner needs improvements.

The implementation of all ducky commands from spacehuhn's project should solve that, but it's sill a work in progress.

[j1t077]

Thank you very much Tobozo. In case of making more changes I will notify you to see if they can be implemented.

At the moment I will try to translate all the key codes and upload it here in the discussion if you allow me.

[tobozo]

last commit on the secondary branch broke and fixed a few things.

The WUD is now using SpaceHuhn's ducky syntax, including the existing keyboard mappings.

I probably also made index.h uglier after trying to fix some unclosed tags (wouldn't validate at https://validator.w3.org/), sorry about that.

Most HID functionalities have only been partially tested and the PenDrive should work as r/w from the host side and readonly from the ESP side.

This is still a work in progress though.

[j1t077]

Hello Tobozo. I've been testing the new version with spacehunh's syntaxis, but it doesn't do anything (at least it happens to me) and I don't know if I'm writing the payloads wrong.

On the web it loads correctly but does not run on the victim machine, as if it did not run.

I tried this one:

DEFAULTDELAY 200
GUI
STRING kwrite
ENTER
STRING Hello World!

[tobozo]

Hello @j1t077

I tried this windows test script last night from a linux desktop and most commands were echoed in my already opened text editor.

That's not a fully valid test though, maybe something in there didn't work (could be with the key names?).

I'm currently working on web UI improvements, so I'll test your snippet in my next task.

Now that I've added mDNS and WiFiAP tools to the WUD-Ducky, the development flow of the web UI is much easier.

I'll be adding a free form to send out payloads from a textarea.

Pasting ducky code from a browser running on the same machine the WUD is connected to isn't a realistic scenario but will be possible and will certainly ease the testing.

Last changes

Since last night, using the new commands SetSSID_STA and SetPassword_STA will make the WUD join your WiFi network on next reboot and have the webUI available at http://wud-nutquacker.local/ or http://wud-nutquacker.localdomain/

There's also a new web endpoint /info, with its SysInfo commandline counterpart.

[tobozo]

[update]

tl;dr: improved WebUI with Quack button, merged PWA with settings & info page, dropped SPIFFS for LittleFS and fixed a few bugs.

[tobozo]

converting this issue to a discussion since a few things now appear to work properly :-)

[Chuckletech]

is it possible to implement folder browsing from the webui???

[tobozo]

There used to be folder browsing in a previous version but I kinda broke it when rewriting the code base so the code isn't there anymore, but the logic is still there and it shouldn't be a problem to implement it.

I'm already busy on other projects and can't switch contexts, but implementing shouldn't be too difficult.

There's a function contentFound() in WiFiDuck/WebServer.cpp where the trailing slash is currently ignored, this is where folders were handled before I broke it 😊 , this block just needs to call the currently unused handleFileList() function.

happy hacking 😉