Tree of Knowledge

Tree of Knowledge
Download Copy
Title: Tree of Knowledge
Author: I am Jakoby

This payload copies the names of all the files on a victim's PC, then puts them on a file on the root of the ducky. In order to remove suspicion, the ducky also automatically hides the gathered recon info so that it can only be seen when the batch file is run. This whole process is relatively discreet, bug free and can run and finish in a matter of seconds. This payload is great for the first phase of a Pen Test, since it effortlessly shows you the contents of a victim's PC, which can then later be used for an _involuntary backup_.

Reconnaissance, or recon, is all about gathering information on a target — be it an individual computer or the network at large. Individual computers may be scanned using a hotplug tool like the Bash Bunny or USB Rubber Ducky coupled with keystroke injection techniques to obtain valuable information without the need to elevate privileges.

Network reconnaissance techniques involve active scans, which may be observed by intrusion detection systems, or passive scans, which may go quietly undetected. The information obtained in a recon operation may assist in the red team's audit plan for future missions such as phishing campaigns or exfiltration. On the network enumeration side, many techniques exist for scanning the network from the outside. The same techniques may be applied to scanning inside the network, which is where hotplug Ethernet attack tools like the Shark Jack excel. See all recon payloads.

This payload is for the USB Rubber Ducky — a "flash drive" that types keystroke injection payloads into unsuspecting computers at incredible speeds. It's no wonder this little quacker has made appearances on Mr. Robot, FBI, Blacklist, National Geography and more!

Submit your own payload, or browse more featured USB Rubber Ducky Payloads.

 

 

Related Payloads

PixelReflection
PixelReflection
This payload exfiltrates files by creating a 1 pixel sized form in the top left of the screen and changes the background
Read More
Simplex
Simplex
This payload utilizes 2 KeyCrocs + netcat to send keystrokes from one croc to another.
Read More
ExfilWindowsCreds
ExfilWindowsCreds
This collection of payloads dumps Windows Credentials using mimikatz and features multiple exfiltration methods.
Read More