Setting delay values anything below 1020ms doesn't seem to work.

[exploitagency]

Setting delay values anything below 1020ms doesn't seem to work.

[exploitagency]

I plan on improving the speed in the future but you should focus on making small concise payloads for now.

Check this example out

Rem: Apple's OS X does not allow plugging in a keyboard and immediately pressing buttons.
Rem: It requires Right of Left Shift Key, "z", and Left of Right Shift Key, "/", to be pressed to identify the keyboard layout as English.
Rem: This payload is a workaround and is only needs to be ran the first time the device is inserted, on future inserts this is not required.
Rem: Instructions.
Rem: Set this payload to run as automatic and insert the device or run it through the browser.
Rem: Manually click "Continue", the payload will press the required keys to identify the keyboard.
Rem: Now manually click "Done".
DefaultDelay:2000
CustomDelay:5000
Press:122
CustomDelay:3000
Press:47

The Rem and default delay are not needed(set delay in config page) default delay in a payload is only an over ride so remove them as they also cause a tiny delay in your payload script for every rem/line you add. That will speed the payload up. But check for updates every so often. Things will be improved over time.

Feel free to improve upon the code yourself in the mean time and submit a pull request. When I have some free time this will be somewhere on my to do list but it works fine as it sits now as long as you keep it short and sweet. Try downloading more complicated payloads from the internet and running them vs typing them up, that is what rubber ducky users are doing even.

[jamesmcintyre]

Thanks @exploitagency. My main goal is to be able to run 10-100 lines which are an alphanumeric group of characters each line with carriage return at the end and to be able to do this fast (as fast as the software/ui being controlled will consistently allow). As it is now when I write a .txt file to do this it runs pretty slow, line-by-line. Is there a way I can speed this up now or do improvements need to be made first?

[exploitagency]

I released this part early just for you...
Update 32u4: https://github.com/exploitagency/ESPloitV2/blob/master/source/Arduino_32u4_Code/Arduino_32u4_Code.ino

Update ESP8266: https://github.com/exploitagency/ESPloitV2/releases/

Use 75ms delay and I think you will be safe, obviously anytime anything has to load add a CustomDelay:1000 or whatever. I'm currently adding the updated version of the ESP8266 sketch for this to work too.

Update the 32u4 chip by loading the sketch in Arduino IDE selecting board LilyPad Arduino USB and programmer AVR ISP and update the ESP8266 via web browser or however you like.

[exploitagency]

I think this can be closed now. Let me know how it goes.

[jamesmcintyre]

@exploitagency Just saw this, thanks Corey this is awesome! I'll try this as soon as I can!

[exploitagency]

No problem, let me know how it goes.

[exploitagency]

Check out the latest release for both the 32u4 sketch and the ESP sketch. There have been a lot of improvements since I closed this issue. Speed improvements, WiFi based exfiltration options(HTTP,FTP),Captive Portal Credential Harvester(Phishing), bug fixes, etc...

Also I have now worked up a ducky script to ESPloit converter: https://github.com/exploitagency/Duckuino

Just wanted to make sure your payload is a success.

[jamesmcintyre]

@exploitagency awesome! I will try this hopefully by next weekend! Awesome work! And I'm sure the ducky to ESPloit converter will be very valuable!