MATCH – specifies a pattern that must be typed to trigger payload executionSAVEKEYS – saves next or last typed keys to a specified file when a MATCH is foundQUACK – injects keystrokes using Ducky Script 2.0
QUACKFILE – injects keystrokes from specified fileATTACKMODE – specifies which device type to emulateLED – controls the multi-color LEDGET_VARS – returns useful variables for use in payloadRELOAD_PAYLOADS – instructs the payload framework to reingest payloads from diskCHECK_PAYLOADS – checks the MATCH and SAVEKEYS syntax of the loaded payloadsRECORD_PAYLOAD – interactive payload recorderENABLE_PAYLOAD – enables payloadDISABLE_PAYLOAD – disables payload
INSTALL_EXTRAS – installs optional third party toolsKEYBOARD – reports if a keyboard is present or missingudisk – mount, unmount and format the udisk partition
WAIT_FOR_KEYBOARD_ACTIVITY – halts payload until keyboard activity is detectedWAIT_FOR_KEYBOARD_INACTIVITY – halts payload until keyboard is inactive for specified timeWAIT_FOR_LOOT – halts payload until specified loot is received
C2NOTIFY – sends a notification to the configured Cloud C2 serverC2EXFIL – sends a file to the configured Cloud C2 server