Key Croc
  • The Key Croc by Hak5
  • Key Croc Basics
    • Serial Console Access
    • Updating the Firmware
    • Factory Reset
  • Configuration
    • Default Settings
    • Understanding Languages
  • Files and Directory Structure
    • Understanding the File System
  • Getting the Key Croc Online
  • Configuring Cloud C²
  • Writing Payloads
    • Payload Development
    • Ducky Script Commands
    • Command Quick Reference
    • The MATCH Command
    • The SAVEKEYS Command
    • The ATTACKMODE Command
      • USB Identifiers
    • The QUACK Command
    • Advanced QUACK Commands
    • The LED Command
  • Beginner Guides
    • Password Sniffing with the Key Croc — Easy, or Super Easy?
    • New Features in Key Croc 1.3
  • Tips & Tricks
    • Interactive Payload Development
    • Installing Extras like Metasploit
    • Helpful Payload Snippets
Powered by GitBook
On this page
  • BASICS
  • PAYLOAD CONTROL & DEVELOPMENT
  • EXTRAS
  • WAIT COMMANDS
  • CLOUD C2 COMMANDS

Was this helpful?

  1. Writing Payloads

Ducky Script Commands

BASICS

  • MATCH – specifies a pattern that must be typed to trigger payload execution

  • SAVEKEYS – saves next or last typed keys to a specified file when a MATCH is found

  • QUACK – injects keystrokes using Ducky Script 2.0

  • QUACKFILE – injects keystrokes from specified file

  • ATTACKMODE – specifies which device type to emulate

  • LED – controls the multi-color LED

  • GET_VARS – returns useful variables for use in payload

PAYLOAD CONTROL & DEVELOPMENT

  • RELOAD_PAYLOADS – instructs the payload framework to reingest payloads from disk

  • CHECK_PAYLOADS – checks the MATCH and SAVEKEYS syntax of the loaded payloads

  • RECORD_PAYLOAD – interactive payload recorder

  • ENABLE_PAYLOAD – enables payload

  • DISABLE_PAYLOAD – disables payload

EXTRAS

  • INSTALL_EXTRAS – installs optional third party tools

  • KEYBOARD – reports if a keyboard is present or missing

  • udisk – mount, unmount and format the udisk partition

WAIT COMMANDS

  • WAIT_FOR_KEYBOARD_ACTIVITY – halts payload until keyboard activity is detected

  • WAIT_FOR_KEYBOARD_INACTIVITY – halts payload until keyboard is inactive for specified time

  • WAIT_FOR_LOOT – halts payload until specified loot is received

CLOUD C2 COMMANDS

  • C2NOTIFY – sends a notification to the configured Cloud C2 server

  • C2EXFIL – sends a file to the configured Cloud C2 server

Last updated 1 year ago

Was this helpful?