niceducky added - #36
Conversation
There was a problem hiding this comment.
Pull request overview
This pull request adds a new HackDucky script called "niceducky.txt" that demonstrates USB HID device trust vulnerabilities through a humorous, educational demonstration. The script opens Notepad and types a series of messages explaining how USB rubber ducky devices work and the security implications of automatically trusting HID devices.
- Adds an educational script demonstrating HID trust exploitation
- Uses dramatic timing with delays to create an engaging user experience
- Incorporates random character generation as a demonstration feature
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR |
There was a problem hiding this comment.
The repetitive use of "STRING RANDOM_CHAR" 30 times creates unnecessarily duplicated code. This could be simplified using a WHILE loop with a counter variable, making the script more maintainable. This pattern is demonstrated in the reference documentation at lines 374-380.
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| VAR count = 0 | |
| WHILE count < 30 | |
| STRING RANDOM_CHAR | |
| count = count + 1 | |
| END_WHILE |
| STRING RANDOM_CHAR | ||
| ctrl a | ||
| backspace | ||
| STRINGLN I bet you couldnt read that, I could. |
There was a problem hiding this comment.
The contraction "couldnt" is missing an apostrophe. It should be "couldn't".
| STRINGLN I bet you couldnt read that, I could. | |
| STRINGLN I bet you couldn't read that, I could. |
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR | ||
| STRING RANDOM_CHAR |
There was a problem hiding this comment.
The commands on lines 32-61 use "STRING RANDOM_CHAR" which will type the literal text "RANDOM_CHAR" instead of generating random characters. According to the HackScript reference, RANDOM_CHAR should be used as a standalone command, not with the STRING prefix. Remove the "STRING " prefix from each line to generate actual random characters.
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| STRING RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR | |
| RANDOM_CHAR |
| ctrl a | ||
| backspace |
There was a problem hiding this comment.
The commands "ctrl a" and "backspace" are not in the standard HackScript format. According to the reference documentation, modifier keys should be in uppercase (e.g., "CTRL a" or using the CONTROL key). Additionally, the cursor key should be "BACKSPACE" in uppercase for consistency with other HackScript commands.
| ctrl a | |
| backspace | |
| CTRL a | |
| BACKSPACE |
No description provided.