Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Payload BUG] Unexpected Symbol #455

Open
9 of 10 tasks
3DPixel opened this issue Jun 10, 2024 · 9 comments
Open
9 of 10 tasks

[Payload BUG] Unexpected Symbol #455

3DPixel opened this issue Jun 10, 2024 · 9 comments
Labels
awaiting response waiting for response

Comments

@3DPixel
Copy link

3DPixel commented Jun 10, 2024

Payload Title

Add Local Admin

Payload URL

payloads/library/execution/Add_Local_Admin/payload.txt

Payload Setup

Copied the script from the above repo
Pasted it into the Payload Studio Community Edition
Clicked 'Generate Payload'

Error message:
Error on Line 72: Error: Unexpected Symbol: [ADSI]"WinNT:
Error on Line 73: Error: Result inject.bin is empty
[!] Payload Failed to Compile

Problem Description

I copied the script and expected it to work.

Troubleshooting steps

Deleted the entire script from Payload Studio and re-copied / pasted it and tried again.
Same problem

Suspected Cause

No response

Screenshots or additional information

No response

Checklist ✅ - READ CAREFULLY

  • I checked and didn't find a similar issue already reported
  • I am using PayloadStudio to encode this payload
  • I made sure to redact any private information in the details shared above
  • I have read and followed the documentation provided by the original payload author and configured the payload (if required)
  • I have confirmed I am deploying this payload with the correct device intended by the original author (Original USB Rubber Ducky vs New USB Rubber Ducky)
  • I have confirmed I am deploying this payload on the correct target host intended by the original author (Windows, Mac, Linux, etc)
  • I have confirmed the payload is compiled in the correct keyboard language for the target host I'm trying to deploy it on (US, DE, etc)
  • I have actually read the above checkboxes before checking them, including this one, which I have intentionally left unchecked as confirmation of this statement

Agreement

  • I believe this is an issue with the actual payload itself. I acknowledge this form is not a request for help following instructions.
  • I have carefully read and filled out every section of this issue form to the best of my ability. I acknowledge by providing insufficient information I cannot receieve adequate assistance.
@hak5peaks
Copy link
Member

It seems there is a additional duplicate line, remove the last line $adsi = [ADSI]"WinNT://$env:COMPUTERNAME"

@LulzAnarchyAnon Seems there is a extra line left in your payload.

@hak5peaks hak5peaks added the requires review from author community contributed payload requires review or clarification from the original author label Jun 10, 2024
@3DPixel
Copy link
Author

3DPixel commented Jun 10, 2024

Thanks.
It compiled but it didn't work anyway.

I get this on the PS window

PS C:\WINDOWS\system32> $Username = @admin2@
At line:1 char:20

Unrecognized token in source text.
At line:1 char:20

Unexpected token '@' in expression or statement.
At line:1 char:13

The splatting operator '@' cannot be used to reference variables in an expression. '@admin2' can be used only as an
argument to a command. To reference variables in an expression use '$Admin2'.
+ CategoryInfo : ParserError: (:) [], ParentContainsErrorRecordException
+ FullyQualifiedErrorId : UnrecognizedToken

PS C:\WINDOWS\system32> $Password = @password
At line:1 char:13

The splatting operator '@' cannot be used to reference variables in an expression. '@password' can be used only as an
argument to a command. To reference variables in an expression use '$password'.
+ CategoryInfo : ParserError: (:) [], ParentContainsErrorRecordException
+ FullyQualifiedErrorId : SplattingNotPermitted

PS C:\WINDOWS\system32> $group = @Administrators@

@LulzAnarchyAnon
Copy link
Contributor

Thank You for letting me know I suspect it would be a copy paste issue that caused it to happen....

@3DPixel
Copy link
Author

3DPixel commented Jun 10, 2024

Exactly the same happens if I download the script and import it. No copy/paste

@LulzAnarchyAnon
Copy link
Contributor

My apologies, what I meant by copy/paste was. When I copied, and pasted it myself from my other repository.

@hak5peaks
Copy link
Member

@LulzAnarchyAnon there was a typo on the first line for REM on your pull, I went and fixed it since it was just missing a single letter.

@LulzAnarchyAnon
Copy link
Contributor

LulzAnarchyAnon commented Jun 10, 2024 via email

@hak5peaks
Copy link
Member

I believe this issue is resolved now? just want to confirm.

@hak5peaks hak5peaks added awaiting response waiting for response and removed requires review from author community contributed payload requires review or clarification from the original author labels Jun 10, 2024
@LulzAnarchyAnon
Copy link
Contributor

LulzAnarchyAnon commented Jun 10, 2024 via email

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
awaiting response waiting for response
Projects
None yet
Development

No branches or pull requests

3 participants