From 2cd3d0de7f278096c174d5dc1f008ad2f6e3f56d Mon Sep 17 00:00:00 2001 From: thehermit Date: Sat, 4 Mar 2017 20:30:01 +0000 Subject: [PATCH] Add Ducktoolkit Lib and Languages --- .../DuckyInstall/DuckToolkit-1.0.tar.gz | Bin 0 -> 22180 bytes payloads/library/DuckyInstall/install.sh | 93 ++++++++++++++++++ payloads/library/DuckyInstall/payload.txt | 3 + payloads/library/DuckyInstall/readme.txt | 14 +++ 4 files changed, 110 insertions(+) create mode 100644 payloads/library/DuckyInstall/DuckToolkit-1.0.tar.gz create mode 100644 payloads/library/DuckyInstall/install.sh create mode 100644 payloads/library/DuckyInstall/payload.txt create mode 100644 payloads/library/DuckyInstall/readme.txt diff --git a/payloads/library/DuckyInstall/DuckToolkit-1.0.tar.gz b/payloads/library/DuckyInstall/DuckToolkit-1.0.tar.gz new file mode 100644 index 0000000000000000000000000000000000000000..3c5d97b528bba069ba80d03b84c6ee073674a27a GIT binary patch literal 22180 zcmV(vKZyUFg@6Y@z2=#Ea3t5)z*lF6k102U`bI)~xIBD@v zJOtD(C9z&D^_II*^#1z$%nZ4^lAZLfP5W?oRe@C6B{{?S`k5iUGVkBb3qLi*yM;Bm ztv>topD{k?=jZ%?eD?p3mybT1oQ}`V&QB+g&ra}s^62bj^4a`%;N{+@3AL#}vhu$E z*tlPMzrVTvC!ezuo%!X`mi2#TPsXQb6MHtEoMw}=Cnr-g`ReTSt0(6tlQV11PG?hd z_SNb5T>Z0o{`2$cKF^x$?v3}wovV)~qw(?YL4*9^@#C`(`#-+#`Tyzp|gepS1r`v-r2c73g9cplWdcdKn?vW0#3?pS>}T5W&IeEv7}<-e`AqpUC?DD}C% z)b@RC%iw$&FerF>_{@d6a?_^9Q!KeM*`1lYa;`?Nw)Mi7%9iV6HEmpxAFJH1ZQ)l( zc0LdIg{k=0Z_2`(91rC2Nd8y2DgSf+=vb{xRpU{R8EaD!lNfg7%9+OuS3=DNHaN;= zb9qI)z1qHrFDm@fZ$pFcTU{?~u(EM&Dyuh@tFbRV-D;y(%(V_#190vt4mY5nGH1w zbY(MQyIZ*M^PpC4b%ZaY`hCscb6Z&Gv|hMyl)DN9e6{7bnESSLHP{U`bdmYBt<2o& z%C0;Fs226Iz(WYE_V4j;8qj?keTna62debJ(mG-Eep#sYJ^lD{$UoI+v0c%wf`e{A z`%Pua05L`TSbDM~&ul&W*_3myL*2|~U*j?MqY9q^mV!zRa|y6H8u%Q>c9+JnTFcCW z)s3CP3T+*Zggp$s%__6nrm>^IKl#OK;mY?q_gO>8hZ%yIW#RZ;v_rOyr}Q1$K!BLr znjgLpo7FeIwo~u#U|FkeIeiC;+1<)RZR`lEEsR=?#8i$T3UUd0kwG=p7A9h9SkS`e zO(BM+t?3!Q1=QQ%Q zU)cx7Rd}36{j-D8pPxVMv!DMjzq`2k_UiiOx1(kLsc8IC{(pRWul_rGboyuh|06y~ z+6zQptFJv}#Lx9lu!7O}ZwHIIUWKoZkAVjl%@px}d3QLz;ePcJe0ELF~3=-qg)b#kaSy9TNCmMl!F>T6ns}C0D?u@5h zyJ=+*DL07OD+D$g*B~h)_O`=?-|^_l=;T-MJ06_~x93OWCr2meO!m2Z58%`C>q2O3 z=;%y76`hMb2c6rE1z=gU^tv~%F5cc=>3`QxUteAPrF;C^0%dgj{%zb$CP$N#Lv^Gt zeMKOF;fVu|v29Y+ex{#YJ->K+{pQ`XtLuxuCemO1WTfH_#PyUZT5mAxl<#(N)gIMDzQ9A#mlm_?@aPHY(hWhFjN`3LB=Me-lTe@ez zk?vPVr{hRhkC-OFW6!_@YD8j>J|QvE9vO@&T3W5zPX8b}zcmQ-=>SISSThJZR6ji@ zGnHToaQc6vMdcL=36PtNMk6AcnErJUWpa<{=dJ>zH^pjUfaVKpg8g5?xc&Tp{o?ZK z=Jx87=9rJ>|H=5#+4x@l|LFYW@t^ts5BTT@KHuKF)!$y-T)n=y*00_^g-PgW7V4ql z`1~Lhjy@gglPCJWo6_o&@%XV)$StdF<>rf8A6y>tL;V~!tZ)6S-cW7*+&5*;J~l*M zn~n5;kUzj3W??q+)%^Isl)gd*we=>HviuXRQqO_>K}F$R^Mya*Y{=7`E4*e-uwRn{!06i&5%gUrcN zvn8tFLceOJpau{l6tS++Gi-av92a(0x7;A%sgQ(0Tah-voh$P|tZ#gE7eER(r~k)sHomo`_BT5awye1rVD^-aZ$<$g)>42!f&k?BsOn$bF=}C3=AtJAYLxyp^u9+?-J=NM>sT=J{teZt^U5rbj@SPu=R zKwXtx8U$%xu9G22h8A&kAjDV^>pw#B#PNqskFX_1sE_Qa6*;(~T_lR%5HCQfg`;*+ z5j^e70L_XvNPHdH9IX& zR2$eAe)gu)n4TH80Tl6fI z56KY7MR<=andex`zBg1_3_r?2XtG7;@etj@(kcqSYR3{`@76OLH@igoM(q#+6^6AJ z!Pv}U!LpWyYcNZzB46R2Vdc^Dc%eNL$LuXT-7t+-J<}6uwN{CBE?_P#Q(*yfVatw& zg1i-|@k^^JHYR*?$xK*I&!qcJrojxvpd^9z)%8Q>1&65@y53Oh)B;AT17JgHgrc_2 z+T2UR*-{RN5^O=t=5TZ z-tOuPrW-@v7il{je|ekOVumv= zW|=z5CfA6;z%ITCbh6+RCuHsv4jf*z^jL1Ue#t^}*#l9SqJ`{Bn+yZuDFRn2k-~*hXQZdp6&rybQI)qI*lN$tdQsPQ3ZE6Pz zL{r2f#!&=NNx!h9sEJ;lcpx%MEYo2NQ(j`tOkrjCP1%KpDffV~tf>fK2r=L=5vI?Z ztQKel^aK;m8>C~BIc8BXaae*NBt?i|!Tv_|#@WS?-uDhS+Xqwyg|_}p`PCeXpIx%Ms>lSD>?>~&5?TFKzVkU%|_ zkf8c@;~8y1aTbB{En+J)za~S&2w*OYQgb_sNI{SQ>8lGz2;5DIMk>*R7sjB{1R>i) z0f}_!%Om2YtrVh>$GpRc%a_tT5f`B#4%h6(aWWW+l@dQP=>X0=Y2(AS(3`8*-{0zs zn`ip+<;}AfZ(h8-xuwD55z^Vrl|qr{58m{0%s}8N>on+PgZ&Wt|^P~~RDZbv`pC_U+c<|w!f?A(L}sYntgh4c` z&St_@g5*ce3I=rw{qhamyeGX4$3PAsf|02&57Px7!IEhrJK$&G*xIOea^;M)!7ck} za2%g99?|It&VVreo^l&qLCBgq_B_bvRSJ^21#$G2fVf*5LFlBjS8<$?VXt%(z!InfmF3tByVp+plAVd`_P^nTNh3^?Nln|F;@G5#W zoEIta5tdS>O*}}bH8CR^Cj?v5H3-7p+};o{9a~SrKO`eITXuBTRtWF|AT&#Hn@)oe zG%i+>Ur1HgjMr~GL5?s`u_j`4AeJZPZd9HTils{#6$>q0X*pdJhM)%545_>=im1M5 zDNDPerQMlZ$@JSgL)B1{lw(m!9|!d@k{(2ZjkeL>M4aFvL}tVT*pgZYDZmB}mLgSN zgV*f>b4n}1DVJ@-H zf)sz0fb94k%2P);Ou#O!kQ1f=_k0x#uIc9`-&IQkP_p@aOWliM5@lutCANfuz&nog zA|!VEtSL;}ZCjEU(h(DuD}_Bp-8&dsu@x|8mLB7}3YWLdku`>wv_z+)TP|oVu_+s2MIuchpXOj_VMWS zeHaQZiFY=uR2IatvTNGQICxR#w&HCF0(Cc!)=WJcwotwgKz%+wk(WTT6HeUjnru{2 zNJXLc8e_eJQfjlBnt;-=h{iJ$KD)hgm_B62Xth2u?#cSpYU;Ks2G8>3o0(kq^Ld3Y zV#(Lx2B`i!zoDviNa-;5Rt!D)Tw3;vp!VIBg}Ps4*4_&Uk1yZ>ogwn^L~1H0+pS_X z*8`o9Dr|y;$u0XmmdPtsH+k1Bh1=0yr}ZH{sy6lafJ9rTr8}=7_>3}oF76t&DKBHk zK8jshn+&cXuicfn%YZm3c^ zrPCBR<&scHZfbUpWmBdimdjl+g&Fl0rhsJD##Vsp^Uym*qbtQb;!O_nkX)t3-?yO_ z_NP{E6}X{R+2jV)3H99Q;tfhQcAxeRIVI#i&daW=?#Dgp&maI(XT00l$w)sn0g>rd zTaZW@d4akxHk;>sikCkCpx7wW>jdJc_dwa^UL*QdYVdPEm{1^gvG!85BrGR(MctuX z^?DaHd}-^{l1%ieVGOK5xYYnPP}76kWTGz8nK$#eq3%>X!lfPqjE2u76E_jG?-BRy*;%x);K^hp4pS?0 zVbXxIW~@ZmYU8Sk&~&f zj1^S!fUsXgkW;pW9=Ba6ZdFe3S_vAdg-G!?OZj_%uzOR4Y=jVd$+!7gIGv4h zfWgkG%c=D(!$tZV76S1*_d&j)9t@|G$(WnGfv^KaPUpyhI=jT+>4@S;I`?=h=N?j& zzZQpmPU5*hwmQ0GmZ=X+t6oQUyzx8Aqf`nLnNpqx*3H|rPlzeCn4yepQToEqDVdG*kqDY(2p-(z3c^!nwtAqGe=p=JvV(a z*3Te@wOC=RIVv~s^Q;jWs?j-JrA)fW5J%sMYgE$yRh22;wXTcjo zf}qXDGfOCqD+(C@)FFrLli87(PW1F{%Y+fe&Qz)aMeq_(0b8rgvBAWU{6KnSBW_R1 zz1nwCNrmxXJS*q~jdsG9XzG}NF-MDVBFD(avlc(QKKZ1PyYn=JEHg5og*J?;)Q#FX-n zFc9Turl?#qE3sqS_T0WKOtVv=5}&w6n2*fx;r7v!dc(gzE9XLBI6(W2km=S*YEV-1F8{i z>^H{Rn%hOBxHBpCUQ$!6Z?!2zSk*#=q}oRhS!_J!vhkRP6&m`9>}xrpGlvXbrRzt@ zK7+uvy(Z&>M%mu-fv9*H7yCN#B8c26UegsT`cuVt8aVw`wD`20=eL*Q9x5lqGy0iY z{6WS>S@AND6I6~>A@`2rZlvkie?bLN5;Q50Rv3K1aRzat*HL#tSy(Aw$g&;o`MWh( zUzVv_?OmKS+jwT*b!fymOO!T_3^CrF=oXEa%lM{7uwY!`dAjVC+FV-ahjjI#CA=`< zBS$Te6vrz;&vN*|t9@V#kuYF2!Lv3d|UQ1xy87Y03isWowf_KsOAh_^h zEH2k~qz^9*!xk&-Vkog6k$jR|JcY~ciY^?KbviKLZ9{SCOQ^k+W1{YFz>`Vs03D9+ zyDNaPDR=eL32AEU2;87Qur4T{wB7k36^vBu($VzV7tK<#8X}G7KWO&V?zM&l1$sx! zr5c#|oD7=IZC&ED6A^E|4!u+AF6IAEdspAq#*yUj@A(uH`EDg8LI^N+mV~>NLBzUX z;CPAG=dg-EgV9DvI*nw^X0xCDx?Z}fduAkX;t&V-Jb7YKGt<*u{Z{p>m*$#B7D6S_ z3^!Tw%7QQ^S8y8T$}h8fa&(rMB>`B%=$G2{S?MK3224*wRN0EU53Tg(KieY3G|#)_ zM(9jQSchEcL2aKZE7*c?>^yPz)IB4t@OHXmI%m#a>H{SOfU)d=v=~LY1EywW2IjBN z-3T3n-j$h{X6!71BNVQAg@{<@V_A`g#?vs-jnynZ&X&3*-^+mMC>R*E$LuyJtD!;f z@+L(YnBBavkc#5d&JzV=v|2-X?`qr~_ARbNt3)x>hXIQ?4|=l+;b*pVDv)+CvvQ5D z$a?_CEMm0k4rsVS4tct@|E_KB(xS$B7f=eU#klH|v}g8VBRar*0spI;q&p$#)_H_> zP6vOo!sM8Cs|mSS6K5PDlYk`xHKZv4Zx_8nR@AH$POoD0Jq-+ zUCOm-usoyamx#qUs=y^#-C9{aSTy=6`v!YhkOdM)$8f|dh)Qrgo}Jaz*Dl?zV~-A} z!}8;iJtW^UYE@W4SBC2jz?HR&;zd8Tpb`Paqx17_ijo$6Y& zQ6&e1hFUv2F)xnbIWy@0Z$uuU$qaLy|jB}cHA0-5nYbVeWQ2xtnn(<9ne~i#pI2f z^PtC}4Q3TLT&K8ngb&PO0A7&bHV8_Bc@L!A{*dP#HnJgB0_PIUygl3@l;o#xsd+$b3AeM&JbLVt9o*++-e&AQr~flDa5)2OvJ~ zY&e|9WC<`8$1oG}vcrmjhmnYpg>28%+;)~z1_B07I7p;&0c`5M8A#K_DnOCt161AF z5Q|1x04R{@i`*5_0)f&5j4=c?2{udEfzfivwgo-m+fGgdGtwxZ3wmeMChtx$$3yVS zG;7pLYcMv>lO7lbY8(f~9_#Us$qlhr)1YzLcERmAp-u=QkiSq;5Vn;^H>^LNS3y{T zqHgYeiV02UOLU1>JwSz`bOx@9Np_oIW8<_xoWWu+8{#_3g0BL~FvW4vitH*00jVQ$ zUF1*^S_TLzqIQvM4w^R45>)ejdk~DAGjMac>avq)`@%D#4RcGS3&q++pEW-C9GUf8 zuN<3~htxoqyXqU{Nc$AIWppz!V$yclwV!fkB72Nnxag<`{h$os^(MHruxGWi$BAgi z{#D~-I_pnwL@td;gGN`CN+G=I*D%G+(fnm3;eW8haS|17VbpFP-?mIeDDfT!-n3z7FlN~whaxH{2oU`ZhY1D!OcJ~8 zsmZM#6<313++_uq&Oj99)t(gD1s&8Ir))A;6>!03DtQAU z35732Irk87o}&%OHoLe5a~)y`tSWMifo60$Zvcg&nC0_o#O^Z1pRxAr?vz86V3|X} z2aNi}wg}A?>?m$UptP>pg zv6z|`R8V>mqXbxR*3C%k1R7<6*#&5}*s`k&7Yg4^32&+KW1Ah4P@A;w7hvB4n-_-3 z^sNvfn3Q#Awm?nR$svtb)^Raid6KQeS0H0rBgCPEo1)q>c`MtOhVVG>Gnw4P?S)LE z#4gFmfM2)jfchU!EVh`lwqhY{akVyCVm+DXK=SC4vfZC*?a!+){l(|aj1KqPTW7uBmpoap(P(`|ueo33stD4T?&W0yv zoDGS#O6YitVL)Yu-7ES*=6%d{;r4{+=(fW8p`;3KgacwG7+YYlWxVPpMwx-;ksqT? z3wnW}qBPdv393a+A1CFKB|+p*s^7hEM;aKsuZEsmowmeDU}C$Bky*?98{fwRR_D}f zZd|cZwwZ2Z&zmaELdvy;=mX{jxZ-UatK&%R8DaFo@_KmVKF2#JxeOJSE5XJ_KpLS3 zJHy5BMxfwLPIG(;C{-e;);5{x&}GE10DFKzh1|gP zb4bvH;MY-gO&ulRtB5cF7^1FSgPY4Zg4r~%zF*c+LFo?(k8u4yFdj`JMl=^xrsp`I8|wg@ zVQPeF8A*9JKuoFyqAQ%QFm>WaNXeJ4MUr_6W+Y^BAyp0i<@_kCDK{YTvS``R0B6R# z-V3;tpgXuEV9bU>C4{g5u+=s9#+Tl*wL;LxbH^zRg?I3Oq?CuKeiw>}Qrdd zyQ>3LX9d6*F(SklNCB=!B7~AbnUP@x)Qqw+D3l|;sH$Nvx}bzV%0xe~M`M9u)OIP2 zKuvwCxbTPzzc89NPH&h%7i_bnXO$h8Gw3RDWf;VjA%`Ia3_oeaJ(OxLrrZ-4k0C?! zh0$$C$aOCW=}t_H940z#$~DQpfi3ALsneF|_O{fh$NMBFTwp5SY5ywGe15XI@mgbw zo;zY}JT1wmRn_C7Y;`s0;C#jgMlDtNyXNvYVvi3~ov|p+R4D@YbbWxkxjE(oIRfkH ztOSn9Bm?l5Gjf15g?gE=!n$wB2e6^gn*408+kHhI#0PS{)g ze@1>ny>uiQLWYp)-c8VIy%HkXWj*g@kY<2qf373?H^$H<&@@;WW%J>4ifGG(OIY7Y z*EmAC%lyHBj*>lcSFsf}3noVSc^*j`{n#9yn{~5GuH2F>CGT>GXg-R}Y=!7r6PKxz zjWoE$03JEj;`%`HCS2rYbXeG+D_n8{xIw%?YpIud$aO%5m6~Rx?|xjggOJa8CJZy- zNNmy^DdCPY_iaW?iq^85iC*xV>5NPfD1Uj3_2&X-CmoFUTv$d_@IOy1DQar1rQ z`ZjO6Mx28f{FtrR)-cYuj@{hJNHnD+myz36ScIJ}c9#$GGy&&ac>w%&V2bK`ZsQHe z)|qoo!7ym#gd?ghyFF46Ag>-GaVl;}@=TGqjQBj5LA^LiF&kGg*HGs+ zL5Ay`I)OM7W$&X?|1^`Bm_z<#t4}U2z~w3@HnYABD^Gz6m0HUihZ&0PGZT^zTRz6U z&l9A*)DWx`M(+1@#zJ=8$>^p#U`yG^aiOE=Ev-wo9`kZ5-MB4=Y!fiU!Oe`uYvef# zqhV=@!XT;t(IXZAMxzgel+FMu0rS}#tHei+pw18Lg56UqNR4(Sv#gNUOieu-F&%q% z!1<4_(7TCIFE=S1d`BIhII3i2r5+#Hw3asI+>lVm(WGP@Z!#hy%qc;1F(#lujn8b- zPGUMQTg-uG;KVRC+IS+KZ?jZ$6KWuYby47In%U^qTGH=H42k!oCc|;r&Q_}KAVZGK z#*_4%Y#fd~)hW29PD=yIZ`wU)A;QNl&i$g0-hyw_jE-F36&s|< zTx#5rqd`d%zNuq{g;zPxDC|43PU9RSrV(V9;v?el>Olo)YRK%KEeh|{T025m7jX?q zKLA+|Cxaej)sj_biE`$6Dz~%r`-5=K7zE)WqLdcsmj!*v6P>)>ahB5**R(H`m12QN zLSN^G&l?y7WZCFX@bsod1e3+u?F!MSlHW*LB!)K@9*NAO38PbFe(z5Sf8+Qva1I!; z`cflRYQ%C+g4!(_PAigjZfHx+$-7wZkSmmQ6m&>o7M&$Svmgn!ni&w1 z!reh(By(A1O}Wty*Xg@4khfpkVy@QjKmDi#KIwGJ+Y9Z_G zD|NFQMkEFeXsgZk=W0qhZF*QRO7P$fs(wGsK-e^t8S;VTTpGRNe}V)*1j5l$EvXGy zU~Og@V?I@a{3DY-ZYiV54MxTmrN|>Y9VPoaha+WWHzd#Snq+*DbC0dcK(ckJNxd}R z0!ap{=w#fJM0!ydB;Or%z7|sVm9FgOK&)aU2ZdKvgJEOR;VDKy$DxvKff3u9&Om}> zCsGY}M4ZeXz(EyMmlNCu$K9JN^m7`iL4m*EWu@TMG!|dwB!M^Nn9s{fCP$z9y=>Ve zo7HSeb6Khtc%_xZ;&i#$VS(2gh9$YfC%fQdcGCQ+;78(lOPV;*vhz-b{O9_Z+P5e0 z5~cbFa+Nj@FhZDmV2C5Rcn*6-pOz^q=SPs}VZ*djyC$M_wqOFYAqDD|AV$!moDMud zbye+8#q4n`sd=7Z$D9F za=Wql?F=JfyM^xxHZ=d;x{9B4Y=d2B{4HJ%fVZJ#Y5!_An0DJfOkGvv5ij16n!tO@i$rJ3KT6nC+ z!s^EyPDV0Xq{QFwsSG&4Jij7wE@vN5D-DVZF}>hNbY*xIWq4I$SQmmI6!nyI9We*K&Qh!fc~T>G z=U_Z@j@)5|+d5R)8b(q>Iu0UR13MBFDD}ooq~j*<7$-72@d>0|pQBdPn?HoqeeC>l zWUUmo5X7IPeo;~VoN;ZpcDIJP4m2a?-3^_vXzqZTfolRCSrxra{PWBf41Fkq9rvw2 zKNMX~8BForzI>yqvdMM%a4>qi-4RQ$bo++Y`Q2?~7dzC7Tha*N>Kn#PTyM$IM7?t( z*YDr)9~zFlHylABBQ8PIGCM$z3Orm;GN4sl)Cp`BJK)m5HqwhXC~2`;bC*{_*J~Ke+W0?gTwuA4x2A(@$o+X-TLcsYwtKdXdS+2 zA0M~2<7cm;=E1>kd#m|uw-xU;U&6^rf8A;w9LF!8xAx+FDE?*ps1+X_H{pf$Ui|W~ zecayr1`FKUKX`T6{^t2{^n8DJyLE^sR4tpY~0Rf8wZXO2!@w3y#V$EMJzxw{+hwYE%sn}@IB zqt@Yf?JeZPVe6pTJ_Igp?H?XODf@dgjGolVxm*k$yVh%&R*XFuL9Op#e4Om<0w)ez z|8rv63Zo?UM+ubQ{N}KQjCRIE^s;R#2E8W(Bc_2-!&l4=9T>075ZjMm>~FVspj&w0 zZ0+xT*Lrmnxm+=P)*;(`whxSXW-8Lg`j{F3m!RLan=hK*w2qvS0pE=HknLK0bkN#r z!w+-cj7Kv7c8OJcN2aaNwT8fj#7)!3Py!52>c{BBOavH!dv@TMZv)M(Y(>AFAC&R# z{t=A8XuEmbjIqY%-)Aj&`mnWU7=?4JxwUn2XyzL{0dJVv9G#dM*xsYwfcD}PZy#<) zc9P+^-D$RWPY$yK55Bx_SO`Vp0CakSo;a%3BIx|My<ljJEUVe zAB-px6arh`;TZ{O1en%YIvPOyJSI*i@dIS^{@eb*se1ut;>cj?Nb1D~X<&iR2n}~8 z3uw;$EXG5N&2FDf>soM`af$sr=LAB%p3}KbO=Jj6s?HOT}E08)CBtF*% zb%AR=mDsv7@R8GOA>nqs!8pg%?A#-^zs%B1Y-x=xBk7cK7=h#7B_itL2FiA^{xtHB z&L(jPkJ|)jl+Kgz58|~atBQTe>c;kvH1rXxfm3yt!9W#XZRnIp{?;e3jW~4Ly?~}c zjpgkt`>>IyDB1#@h#WV2IlT z>yTT`%2<#amUSYE!qzOKI+&g!Gdn`P_n zvHYK=LQQbpgPQI1_bl)bD6 zF4$7DtDHS-r3?I+Oe3D7c#JDH3ZsD`G3*rcHd3-vH(@U%uHlf?pUii`S@h?*GZEGS zn2kT@M<69-Ms7Br9qsR)9Jh8~xjM{O*qhvu@$|+F%^&cr_v><9i_6Yr-866&PX_QE zf+W3(jU~`LmT+jn5WaFhcV2cYV%QFt(&fzScTG~%XSIB(GVPQ4euXtbo=A^B8kNE%xtk4WmhPY%zB{L$-`#IGi1Mvrd5mw}OLJ^#R-<(EvV=*)i-)b>W|L`gU+au-~~CL^$5CVZgR4TsrL!e5N&gxQJApoJNIil`<4VN(RR zevyqtQwAXUv>YznB3U$#uB{isH9Ho-q21PF1sJjm4q%gcxE}ZiCEZ?uod%NWV5|-J z4Pzh{IL{Pz#rU#sgy_-u@@Dz^@@C1fd1>%wJg8qzuLh=f{_T%@ZO_hsJT|l9$NqF_ zrQTS6(cEkAw2qGJ{ox1uM#EfBo;=2X&6WMP(O7@-Z!2q!_4OxfD^J%~4Si*OZQVTo z!D_JJn!%Q0J~yu$b_SLrc*<vRYjD&|(j zWvPyj#vFHV2BU6Ia!jYFaWF`Lp*M66v_0$nI{zM#s5HF%g;d%t!YH zY^%f{)ahh6Bo;*P0DkBOCuwu zbWD3<$vJwJO(iarzFv<|N0XF%0N0VV?Br}VoX)V~FYzSj6wdm?_MW6>A0#cynK5zS zIb72^xZ;o`z=C`SQ0C{%Q-(9(pPdXPhjTB%pD1=?S_w1F%oiWUI2+-cBl|d_S_HPy zM=Z($e8KeN(|1!Wq{cG_2RSR(h+f$(9UT`yKj~YaLiG2cgAg~cA1t#|=%}S6UK+%2 z&f?{9cY3)z9pRkrzzNy-Q6baU>Sz5S_7F5=JCTNPW9K%cKLphs-u{i6(aSc&`C_&W zrd`qo&OuEhfQO*2TW1MJl92OVS5+CT0_D1P2Ct1fp?)7 zOwt?kkJ#~oF+=u%<~(3ccF~`uXA|5#dboL*=RNEMmH|r8iNXAY7y!d?k4dOfsDC0< zPT`aGMja4onq8b61i=(I|Azw4&a+hplx6tFeBc=#DTSRhf)G=Tj(;T(7`+zxpd+t^wiRK)b-(e@~cmf|DMNQ#=WsoL2H()|s( zH*o%Gye$1?wy>qReFaMkDY~}VhJ0XFMsM}~HT!>7{xb{U@P_(peDi^1j9cWt$E!~p zS^4kD+LQGl|J}p&=rc1-C(CA_E+@mcyg^31I*n5ME4@i+4I7Q8$Bv6V{d+E6b~mm8az>0!DOT zTQYY_%Pm0MUjL%!8c{{|6v`@oO^Iq^D*DGdm!f-o77}<1gY2hib(pS-iM;n`J7K-j+63ohsG4y}wgbb+K{Bk+b6>|R8`8}21SFQy>(5U02pIs7MLcl_ zNJ(GgFTvX#sBNVx_spcKC-3@G`8cq=gGR_rtm^B=DIH>^5&$=)EZq|s*zvq`LXoJC@s}N7h{iLJ5 zPS!nmsZyo~%T6;N;dgsz{q15+V8xT$)5(p`5)^~&V=#4$0$>)>`rnPHSCMtK=2W0s z#8T+1eWOl-e7Ivu+lXOda?8$tl?8b~7b@PPwYWSvD_84aX>gd$Y4KV%FCPZ*6m~ES z#nxm3?wnjF6xPT|0*2;B{L_l|e&*u|cV=Q1PnWSr(xHw>YsXqt)HG#U6y>;oXSD=e z$<3y@c|4gh^KanUG)D$eFNm-r%%`C+kYB)`F~}7<=@snR0S4Y zpSb+LsQ)`1$RyI~{8~-$R{LMB|5qEU>jD42k84r?v*7Woae!O;e>JcFubL$w*njWi zQcXW%h^fQKSqG7`&GnokDJeg$<2c!_pO~3`L!y)*5ub?`L!;;p2)AK^6N|a^=B=)p+EI2EAkoe z+&Xms5YEF$SaOB{{(bbktvoe1nZQr%?;RV46b}b)$ZfZFnkT!*MYN7bgpbBY-e2E& zfBn__>wmq!ww#K_%Egz>Z>3g8yRDXVXY)XN_IO{%+5Ss21o8K21TzbK;EU8Zb+9lK zO_lvluRqCZEcOp`3xxSf2j%)sr)qQxDW*(PG=^PU%?C2Trl>xeS1Y!7N3k+Wn0?rY z>^)Y%P zHHbK00-ngq^dhN&r#;>B)PGnR2tBz06Q;8Y{@Nwa{@uX@ADM#e2h4jG6)bxY2|Q5M zg77=05O}Z-pjHK;9PbVRD zf=W4W!4NaGs>0JN^Pjw>Dg6uYE~bXaFAy1^)|nb#YWI!WY5u#O*x)=C zL3p|Mzjt+y5WMOP?>rDjTyTDb zel_iVPf+0BU=Ax18XScnind$NPQEeg2%2d2P1Pg8xogw}8)Cb4|&Jy>FL+(g1Vx^%)zHfl{X`Q5|w* z`(@__hF*gO4O>O#X0U){Z6O`Am8rwDMHcs5pLI=g{FYIiIr7ue z-}Pw{-JNRH!G2e$NOwMh;4Jqln(sF^m^}~)o%~2YdHVq$8H?Mj`+V>jh#hmfFKyR9 zr@8H{$+GZ5tJ;#lM_tS~aE$w{y~Q!G)@YBhF25O%ik=%XjV5FeJ?PzPSF>1=U^9Y| zK)Z9RV6$pfrl57RO~`?O56w455^W@yKfe*T zKlp3mEd+BpEu*6!vS_GE5pO?VI%>Sas`OTY%#3d?a+T z#om8-*&(g5ot>BbEO)UbbJ)_ruie4TOXT3|#XePy0?`jGayHz-WUp9+Z&Tx(u(!|G zl}I!H`2mv_`q>4zkmA7EX-~PO@oMXLkBE?=mSfSQVWo$N@)^hzz~754VR|mU)m>0t ztFc1G%3Z_WLDg}kMaJe_y*lolkAMk?WBOKodI$oNA6^xKc{}6Xa#y!XrFuHc)I&)D zMVQd4Fjv$x##xf|@0)R)|MX7!zp^7Hr4ugotD9+>88DlVbDM#m;y{1d&jyq<8^jLc@eY7g$>r_ynZ$|=AZjtVD1@+J2-%O{X zvafG=ZxF{wEba&$vSbI#R7$uIAObL;|`Pn)9+23D|W;8l>EDPZ31U&n<~WAa?y)ZquJ9L zwnhUkD+5c`#=c#_Q<6zWVI@UNBWHCjPn+dQE;|tzu zTWiX$u4|56%d;sXEM+S#CdCjVc5{)?kIrddWqkN2;CavEd zHL$;Jr3)T*kg5V@A7|*KFDr4ar*C{m}7INbk_PA!RW%2Clqx+Eb3#}hW zPyIP!F)xJoIfh>NYt?+^8Ny2C-0F5?sDg*MH)9lszkN#zlJ@ep#^53@L00S&qM0I8 zG9;J1RQ19e6ki3tDw$Z?UyQ3BIpAarK*VSF91gm?I6!QgNDyJ6_efitv#Rrvia;XFNO^cjpdo6sIRl36 zHT8*_eUvYiB-h$fSAG>m8A?A>l&q7GEH^l7Yn@;3xBBwTz4D)z1(sZ1eIi@D6wM*J z{o$eiBF*v2#KNDnR~#;<`E5sxbzd(o8Grxiuvo)4a2^~rGR$=c9-}g#=bkP0j(tsR zT^d}-p|*DIqk}T5^po$={@nqd)@7?)0-aI6z~>%aFV$`EkK0eYGkS}EP5L)Sf|(Qa zAVb*3wV!Z0&)B0Z0~^i08<|%iq${&-n(!I(@ZBXMxJYjpx8H ztkk|eN@He*)*#_wSb9>`sOyDI1vtwmG#fmyPq&CIaz9z-I5-!Swh5E-$~^rTA; z?Ice*IC<)3di}Cr-nzv86_iB^jrsASYS6*f+tKgMNICf7CN!#e7yt6BCU}a{f9g$W z^dSUVkV2je*_6?bWMc3z+QE3{YW(E3P{io_;)$f5ajU%G5 zydeTei@g1U2w`!^&D6@BoN{DMRPmXEveC;gGf|y#JrW@PG}Fwzl4e%eQq7gw^40>GkvGLy#D;`&6&K^T(4-T9DIg|{o)@6ADT z_xZ^_;91E+*_Nn2AyM^YTo=1`K<_ej)iJaa%F4${#(PHrmwZP%U0Df=?COF)<^*bP z#i^5bm^oFch3YNPD-hpyl7v?Es$&rC1cG9Cn^y-(Yyd7Cgu!L2eePh2vOUS}(T=v$ zWbx>8TP`!X)4mi^p%lBFLg(+~Q3^#^Bt@r(4cY-&Z0=?9y!>^dH}%# zCKd|f1wC-f<0O_TcP2^=v3~(A*<6#8UGrvoO4achj+oYNR$0TD)ZBZhZIcsymSV0i zt@ifK%t!vix@*YK?;w#vDq%aXul;Jw+kMc^1&~hyz)+9-0KNZCm6^ir&dmUDP|;U8 z$&!hT|CTnlJNi0+%eO(U4mgzg?eI||57?r~_>**KV(V{RMk^v1se#=8CJrwE+@frZ zwFCTK2WsS;rILLNa7lRn$ugQNK#p>R9o6uFby=H;;k2Brj8L6QtCTxVR@YFSsR=B# z6$%d*BU*6Ja1m5n6GC%vDp8SWs(QVw0|Aik}myc?Y*jO{%n zS0+kT5-YPn&^Yfxc#Ose@g24P_ic25Vwii!rZZ*uGR+NQg6B>HPy7UjfK&g-h_-Lm zpN)np4cQKW+g=GsCI$71&sZ1;TNi}&Q8JgjE?(b{^^onIuA_U7HUe-VziG~9OF?9Fknw*T zo5MT~I1%OY{}W~B0Z#u34;jBiL6`SGCnKd;#LUX*V~!%5nOKCkoVt7@DV6wqGCo09 zHkXlPvV5g-Tij8TL>f!h4?XtRsyLfHbpLVJnC%MraNXaRA+|_gmYB=G29XO%oU>)^ zIWOB~L`7qk(Yp<+WLm-DV?t;M5)kNHlx-7Us?ZS7n4ox4>wlMJs^AW80bs31&;g%a zzu(VKNz^gr(9h#xG%p>e<7dgO9XX}%wCuvn-en-=OEi$$kfymP9rre!#5}2%y9XE_ zxyhI?F+xN#*K_+*`zSGjvnsvxU1^fsTOZC+!D4eX43_`T6i9Q=8-EWRzISd1m%j@Y zt3=!`$Tu{gmeK4%U3~$)XWS0_DSR>w^yHkQ3URR?bQ5uSLhhgWng$G8LeN}H*QOdtUGf027M_QwKE zgeOCX?~N>=X`mZbhtW^+Ifs*yL>*h{2p1VDSG_B9#47h|7-srtrezHUh9Z4Qe#2a^ z=Or>?Mnh@DYQqJ|3roi&~F+npkt@XKGc_ioPK#01^2hSw0dgx zV%yLFv{<_ADkpY)arGswVCWL)gD8a&eRLXUl*8jBao9y<(w>2u@v05?VoszEJ0Nz$ zoV>aaPn*pGmD-s!jq5mj$=J~rto+-s7_+t7`oWI#MdDoN2$Gl%5bEO;3>z)y-eg7h zT07&1A(I9N5obh8JgW!z-V_e#4tPpXQzrYsk{f3+L|pIT*n}|)a3}cfj13KYUHb&R zJK06pl{%`=C6TsQec-XrBWfGSSJ$wp%=tpz^9lt-|JkfUlL7EvU%0e59qP=8G?&kV z99T5n)(sC|)egxfRzi4mT=ZVBKC=#k_O+WOW2U3KCX&#}_3jK`k!S*(lTk}K<7h6e zZ0osKXhzE>_p%%Ig2?0&uyywj6s1K+c${b31pGQhQ!;uVe}>MO8MINMPk3Cy#%nc| zau%sllRjb-pI?gR4b(Qgr7}Cqq_kT84P5hD%ZJT~dSk#-#als>?hN=ddDxgDx!k`7 zr-VF56qfj+A=z-%!^jH~gT<8HBd1H$^FyF4tMw(!w_4lc(e;NYn~5^})^CKzYs<-_ ze|_zL729$(%QY;J*K1a(WNhTZ`VHB-LQdVlk*w3j89H+Y>B3erk;MCDMl}PfAFdhQ zYQR~KeCt;>;x2X9fx*npwC9u<^B5@^*1v9QTpuc7;O=XF&va-NrPE^>@JpsDJ?wkU zGF1GWRXMMo2TSKU5v#SPn&pYp>zTwtXl8HGR8CfJjd5L2>V?)I?btCU9>0x;&xgty zTuQx6kUzE!M8r$|iqaLym@%@uR&@Vg?i?1%jNuLoObdO~2j!OF7WM8wdWnRhF>*=o zaFMpbkw8#Ec0B7bs>oi|n)Zh5o#=htQrYbR@y~4TypQH~ILJ=fy=TYuw};s0-Uw*8 z{s?mTU^cBI24Cs;)}&)LbR-1!1)D`()VRFWJ!fC15*PH1ECRnPfz17=FzF?Q&WfGU zV-Sq&V4R=u2q+=)4@iwsZ(9tb*IfwI=3ielMgr87)q|<2Kg47l>W}MV0gF zUV)@xKfzDf}@@ z10!n+>SLWdYoc*BQ`nIm_`0B1IwFC!A0$8MboAK-J=6D+7+A+K9&xQ0Gbi!*wNlmg zV|0iK<6zT6<<;Zr8gMMVRV#&=H zi>U?Bt-?9X^V=Mg7B6@+BP}iIDK-f zTijt05fw4x-+;bRCRc}MsWLmgB|UIkX;L@rD-4T83>#; hRLP;*W6HN%uRd3_Uu3s#lvp4EsmzUSbT$lh{{!y722TJ0 literal 0 HcmV?d00001 diff --git a/payloads/library/DuckyInstall/install.sh b/payloads/library/DuckyInstall/install.sh new file mode 100644 index 00000000..bc5a706c --- /dev/null +++ b/payloads/library/DuckyInstall/install.sh @@ -0,0 +1,93 @@ +#!/usr/bin/env bash +# Based on bashbunnypayloads installer +# https://github.com/hak5/bashbunny-payloads/blob/master/payloads/library/tools_installer/install.sh + +## +# Switch Position +## + +check_switch() { + switch1=`cat /sys/class/gpio_sw/PA8/data` + switch2=`cat /sys/class/gpio_sw/PL4/data` + switch3=`cat /sys/class/gpio_sw/PL3/data` + if [ "x$switch1" = "x0" ] && [ "x$switch2" = "x1" ] && [ "x$switch3" = "x1" ]; then + SWITCH_POSITION="switch1" + elif [ "x$switch1" = "x1" ] && [ "x$switch2" = "x0" ] && [ "x$switch3" = "x1" ]; then + SWITCH_POSITION="switch2" + elif [ "x$switch1" = "x1" ] && [ "x$switch2" = "x1" ] && [ "x$switch3" = "x0" ]; then + SWITCH_POSITION="switch3" + else + SWITCH_POSITION="invalid" + fi +} + +check_switch + + +TARGET_DIR='/root/tools' +RELEASE_ARCHIVE=$(find /root/udisk/payloads/${SWITCH_POSITION} -name DuckToolkit-*) + +echo "Install Log:" > /tmp/duck_installer.log +echo "----------------" >> /tmp/duck_installer.log + +if [ -f ${RELEASE_ARCHIVE} ]; then + echo "Found ${RELEASE_ARCHIVE}" >> /tmp/duck_installer.log +else + LED R + echo "No ducktoolkit release found" >> /tmp/duck_installer.log + exit 1 +fi + +# Set LED to purple blinking and move files +LED R B 100 + +# Backup Existing library +if [ -d "$TARGET_DIR/DuckToolkit" ]; then + echo "Library Exists; removing" >> /tmp/duck_installer.log + rm -rf ${TARGET_DIR}/DuckToolkit +fi + +echo "Copying files to target dir" >> /tmp/duck_installer.log +cp ${RELEASE_ARCHIVE} ${TARGET_DIR} +cd ${TARGET_DIR} +tar zxf DuckToolkit-* && mv $(find . -name "DuckToolkit-*" ! -name "*.gz") DuckToolkit && rm DuckToolkit*.tar.gz + +echo "Move Complete" >> /tmp/duck_installer.log + +# Set LED to purple solid and check that move completed +LED R B +if ! [ -d "${TARGET_DIR}/DuckToolkit" ]; then + # Set LED to red on fail and exit + LED R + echo "Failed to copy files to target dir" >> /tmp/duck_installer.log + exit 1 +else + # Set LED to amber blinking on setup + LED G R 100 + # Set calling script executable + chmod +x ${TARGET_DIR}/DuckToolkit/bunnyducky.py + + # Update Q and QUACK to use the new library + echo "Update Q" >> /tmp/duck_installer.log + cat <<'EOF' > /root/Q + #!/bin/sh + # Input parameters; + strparam="$@" + /root/tools/DuckToolkit/bunnyducky.py -l $DUCKY_LANG "$strparam" >> /root/ducklog.txt + exit 0 +EOF + + echo "Update QUACK" >> /tmp/duck_installer.log + cat <<'EOF' > /root/QUACK + #!/bin/sh + # Input parameters; + strparam="$@" + /root/tools/DuckToolkit/bunnyducky.py -l $DUCKY_LANG "$strparam" >> /root/ducklog.txt + exit 0 +EOF + + # LED To green for complete + LED R G B + +fi +cp /tmp/duck_installer.log /root/udisk/payloads/${SWITCH_POSITION}/install_log.txt \ No newline at end of file diff --git a/payloads/library/DuckyInstall/payload.txt b/payloads/library/DuckyInstall/payload.txt new file mode 100644 index 00000000..ee04d3a4 --- /dev/null +++ b/payloads/library/DuckyInstall/payload.txt @@ -0,0 +1,3 @@ +# Install payload for the DuckToolkit +# See install.sh and readme.txt for details +ATTACKMODE ECM_ETHERNET STORAGE diff --git a/payloads/library/DuckyInstall/readme.txt b/payloads/library/DuckyInstall/readme.txt new file mode 100644 index 00000000..607e382f --- /dev/null +++ b/payloads/library/DuckyInstall/readme.txt @@ -0,0 +1,14 @@ +DuckToolkit installer for Bash Bunny. +Adds support for new languages. and uses the Ducktoolkit python library for encoding. + +Version 1.0.0 + +Moves the libary files to /tools +Update Q and QUACK to point to the new library +Writes error to /root/ducky.log + +Purple Blinking.................Moving tools +Purple Solid....................Tools moved +Amber Blinking..................Setup tools +Red Solid.......................Tool installation failed +White Solid.....................Installation completed successfully