Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create Desktop Geese.txt #449

Open
wants to merge 4 commits into
base: master
Choose a base branch
from
Open

Create Desktop Geese.txt #449

wants to merge 4 commits into from

Conversation

wyattm22
Copy link

This is a payload that will run ~30 desktop geese at once, doing this will just about crash your computer, making it nearly impossible to do much at all. To close it, press and hold the ESC key.
It requires people to download and extract the desktop goose files to the root of their ducky compatible device.

It runs ~30 desktop geese at the same time; this will severely impact your computer, not just your performance (nearly impossible to do anything), but will drain the battery very quickly. To close all of the geese, press and hold the ESC key until the geese close.
@@ -0,0 +1,217 @@
REM TITLE Desktop Gese
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This file is placed incorrectly inside of the directory. Please remove it.

@@ -0,0 +1,217 @@
REM TITLE Desktop Gese
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Your directory and file name cannot include space. Use - or _ instead of spaces.

STRING powershell
ENTER
DELAY 500
STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I se you are repeating the same thing over and over, consider using a FUNCTION this will let you clean up the code and make it easier to repeat. For example,

FUNCTION OPEN_PROGRAM()
    STRING Start-Process 'GooseDesktop.exe'; Start-Sleep -Seconds .5
    ENTER
    DELAY 500
    ENTER
END_FUNCTION

OPENPROGRAM()

You can also attach this to a REPEAT for example,

REPEAT 17 OPEN_PROGRAM()

You could also use a loop.

VAR $times = 17
WHILE ( $times > 0 )
    OPEN_PROGRAM()
    $times = ($times - 1)
END_WHILE

@@ -0,0 +1,217 @@
REM TITLE Desktop Gese
REM AUTHOR Fly Fisher
REM DESCRIPTION This payload will copy files from the Desktop Goose application, it should be stored on ducky
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please include any files the user needs to have on their ducky or the location where they can install them. Keep in mind compiled binary's are not allowed, if you have any compiled code please include the source code.

STRING cmd
SHIFT-ENTER
DELAY 1000
STRING copy D:\Read me! Honk.txt
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not everyone's ducky will identify as their D:// everyone's storage set up will vary. Consider using more dynamic code for locating the ducky drive. For example,

Get-WmiObject -Class Win32_LogicalDisk | Where-Object {$_.VolumeName -eq "DUCKY"} | ForEach-Object { $_.DeviceID }

This will search for drives with the label "DUCKY" and lists it drive letter. You can also add a DEFINE at the start of your payload for users who aren't using the default label "DUCKY" for example,

DEFINE #DUCKY_DRIVE_LABEL DUCKY

STRINGLN Get-WmiObject -Class Win32_LogicalDisk | Where-Object {$_.VolumeName -eq "#DUCKY_DRIVE_LABEL"} | ForEach-Object { $_.DeviceID }

@hak5peaks hak5peaks added the pending requested changes requires changes before merge label May 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
pending requested changes requires changes before merge
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants