"Dangerous Tweets" sounds like an amazing promotional series of tweets for Hak5. :3

You can also abbreviate the ErrorAction param and it's value, instead of '-ErrorAction SilentlyContinue' you can try : '-EA 0'; Also you can usual force variables to expand by placing them in their own brackets with '$' in front, so $dk would become $($dk)

Please leave the politics out. Interesting that Darren mentioned "cup holders", I think that is an old tech support joke. I'm a bit older I think, pre-BBS days (with an Anchor acoustic coupled 300 baud modem)....now enjoying my 300+mb downlink, thank you!

Anyone who uses run will notice when it's empty. Maybe find a way to copy it and replace it? Don't know if this will be possible within 160 lines, but you could also move this to the b.cmd, have it both start the shell, AND restore the run line history.

I'm watching this show from the very start. Loved you guys ❤️ always havin fun.

The real question is: Why are the Rubber Ducky and Bash Bunny both Sold Out on your store? Content and products are top tiers. Cannot be beaten. Will be buying a lot of stuff when that comes back into stock.

I am out of my element...clicked on this from looking at Snowdens Twitter comments.....and now I feel stupid.

Other than all the things people are mentioning like using more aliases like gwmi, -ea 0, and sticking the REG DELETE command in your bat script, you can also base64 encode the whole thing and simply pass the blob directly to PowerShell to run. It's a super handy way to run long scripts in short, obscure, packages. Example here: blogs.msdn.microsoft.com/timid/2014/03/26/powershell-encodedcommand-and-round-trips/

I love you guys. You make learning this fun

3:20 seizure warning

You could put the "Regcleaning" into the d.cmd REG DELETE HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU /va

Thanks for the awesome video guys, will await your second part where you explain what is in the cmd file and then will have to break out my Ducky and give it a try :)

2:35 "Thats hilarious"

I believe i am missing something fundamental. We are going through all this trouble to make an interface-less "backup" of data, so we are assuming the actor is plugging the ducky in when the victim is there? And the victim didnt notice the actor plugging it in? It is much more likely to not have the victim around, so not having an interface is a drawback, as the actor wont know the earliest he can remove the ducky. I couldnt find any specs on the ducky's write speeds so with no interface, and not knowing how much data there is to "backup" how does the actor know how long to leave it plugged in? I think for once movies have it right with the hackers/spies popping it in and see a progress bar so they know at the earliest when they can remove it.

shanon is just so absolutely adorable

Could you get a HP Prolient DL580 GEN3 that you could install HAIKU V4 OS over the top of ESXI installed in the HP Prolient DL580 GEN3, if you are wondering what HAIKU V4 OS is, It is a rewrite of BeOS which should be able to handle all of your media needs.

"We are recording this the day after the US elections" LOL. I feel your pain.

This is the absolute nerdiest video I’ve watched all the way through while stoned.

It may cause the BLT drive to go AWOL. Darren Kitchen is zero cool!

if the winner of the week had a raspberry instead of arduino, he'd have created a Pumpkin-PI

As for the M$ scam call, you gotta check youtube channel Each&Everything and Lewis's Tech, they scam the scammers. A bit repetitive though, as they all have the same schtick.

Why not a single digit as a disk label? Save a character! :D

What "keys" or something did he have near his left hand at around 3:20 ?

"We are recording this after the US election" Well, that was depressing LOL

Where can I find the recording of your session with the phisher? Sounds hilarious.

Boxes running encrypted hard disk software encrypt mass storage when attached, not only is that slow - but once done files can be written to it - But then it can only be read on the encrypted system. Thoughts ?

awesome episode! can't wait for part 2!

Hello hak5 team I am a hacker and I wanted to as if we Can store a apk or an executable file inside a rubber ducky and then execute it in the victim's computer. The advantage is that it is effective, fast, reliable, stealth and virtual undetectable if we hide the actual payload inside another original app. Please think about it

You are getting bash on windows but it's like having the windows shell on linux via wine.

Does the Rubber Ducky take care of the different Keyboard layouts and only prints what the programmer intends as an output? An Arduino for example can only operate properly on an en-US keyboard layout without changing the layout beforehand (Slashes and other special characters have to be called differently than expected) or fiddleing with the Keyboard library itself example: @ would have to be called with " when the default layout is en en-GB, since Shift+2 on an GB Keyboard outputs " but @ on an US Keyboard

Why she interrupt with silly questions [like "is this powershell," when there is clearly no ps] :( ? But I

hey man, you can press ctrl+c to cancel what you've typed at the command prompt (linux and windows).

RubberDucky for president 2022

4:40 Oh Shannon, what did you just say there. ^^

Shannon Morse what a telecommunicationy name!!!

please tell me that features of this script will be available on the ducky payload generator

I’m such a genius for only 50$ I managed to steal my teachers school login and now I’m able to change my own grades

It’s super easy to find those scammers, all you have to do is misspell a website like KZfaq. So like this, yuotube, youbte, or faecbok, faecbook, and put .com after that. Eventually you’ll find a scam website that says to call a scam number to ‘fix ur pc’.

Does anyone know what Shannon says in Japenese at the end?

Come to Australia, we get Indian scam calls 5-10 times a month...

you can get bash on windows . you only need to download git bash

you could just use %~d0 (in a cmd script) which I believe is an environmental variable that represents the drive letter that the program is on.

Eyyy it's lit, something I suggested was made into a video

awesome, needed this. bought my ducky a week ago. was expecting it yesterday. submitted a ticket, no response. you guys able to help? is there a better way?

Does someone need the actual pc to do this attack? Or by flashing the bios firmware and IRQ/DMA on the video card?Sorry not that good at security or clueless on hacking.Trying to figure out what is going on with my computer being hacked.thanks

2112.... We have assumed control....

Snubs bites all of the things.

That guy sucks at secretly pressing buttons to change camera angles. Even finding the buttons during fake reactions to statements.

if i wanted to use this to prank my family, what kind of attacks are possible? Thanks

You could just put the clear run history registry key bit inside the d.cmd file...

I really want to understand this, but confidently can say I don't.

what happened for Hackrf one videos ?

You mentioned the hak5 field kit beeing on the website, but where?!

Uh oh, someone didn't vote for Trump.... cheer up Hak5, you won on all our in state items. Great segment. Lost my original rubber ducky to TSA. This is a great reason to get another. Alias Smith and Jones.

I need to compile a duckyscript txt file that I wrote originally for my USB Rubber Ducky. But now I need to find a way to run the script as an exe file locally. ¿How can I make this posible? ¿How can I compile the script to an exe file?

Why not use powershell -NoP -NonI -W Hidden -Exec Bypass "Start-Process cmd -A '/k for /f %d in (''wmic volume get driveletter^, label^|findstr "DK"'') do %d\d.cmd'" Then in d.cmd use set DK=%~d0 to get the drive letter?

What's better USB rubber ducky or bash bunny?

Could you give the link to the Aliasing guide?

how can i get the payload

Question: Why are you trying so hard to make this command a one liner? What limitation is necessitating it to be one line? Is it just to make the command as quick as possible so the popup is less visible?

love threatwire!

Am I the only one who noticed the echo late in the video?

Man !! You are awesome 🔥🔥❤️

dude you got a call and didn't post it. Those get a lot of views

Can I use pen drive as like rubber ducky

I think you can put "-Ex" in place of "-Exec"

Dangerous tweets has new subtext 4 years on, and another election later.

I know this is old, but it’s hard to follow these videos when she’s changing the subject and interrupting you to be silly 🙄

Lovely rubber thing.

Instead of writing setDK=%d&%DK%\d.cmd you could write %d\d.cmd which exactly what you want

This year is cancer

Love the Hair Shannon :-)

So trump?

DK- Drift King

How can i do this if cmd is blocked?

use the name of the usb

you are the guy

Can the same be done for android?

"powerful woman" (wearing a low cut power woman shirt) interjects random tangent thought. "This is all going to be about finesse and keeping things as short as possible, so in order to keep this segment as short as possible, let me power through this." Most polite STFU ever! Calm down, Shannon. Love ya and much respect.

How can i get it in india?

bart? or BARF

Hmm, bash in windows... Cygwin to the rescue! While not perfect, it works (if the path variable is enhanced with cygwin's bin folder)

If only the european store was open....

please make a video on how to do this on a mac!

I thought you guys had like 900,000 subs!??!?

Cool Stuff!

Great vid as usual, please get rid of Patrick Norton,he is so computer illiterate,I know 12 year olds that know much more than him,he was relevant in the late 90's and 2000's ,now he is just annoying and imho brings the channel down.

I like you guys.

ya should check out Jim Browning on youtube funny to watch

bash exist on windows

Please upload your remote desktop recording !!! :D

2 is 1, 1 is none? what?

She's a butterface.

twin duck

tnxs for.the great vid

Best Election Ever!

I. Want. One. Of. These.

I have no idea what they're saying. Like if u agree.

hmmmmm rubber ducky can i buy it in india

I wish Trump would do an involuntary backup.