Q GUI r or RUN WIN not working

[JediSnails]

I can get the keystrokes to go in, but my bash bunny will not "RUN WIN powershell "cmd"" and it will not Q GUI r either. Any ideas?

[GrylledCheez]

It may be an escaping issue. Does the example from run.sh work?
RUN WIN "powershell -Exec Bypass \"tree c:\\ > tree.txt; type tree.txt\""

[GrylledCheez]

Is this still an issue?

[bad-antics]

RUN WIN timing issues? Try adding delays:

1. Add QUACK DELAY 1000 at start
2. Add QUACK DELAY 500 after RUN WIN
3. Try QUACK GUI r instead of RUN WIN
4. Use USB 2.0 ports (more reliable)

Test payload:

ATTACKMODE HID
LED ATTACK
QUACK DELAY 2000
QUACK GUI r
QUACK DELAY 500
QUACK STRING notepad
QUACK ENTER
LED FINISH

What's your full payload?

[JediSnails]

Testing this today. Will send the payload through later.

[bad-antics]

A few things to check for Q GUI r / RUN WIN not working:

1. Attack mode must be set first:
Make sure you have ATTACKMODE HID before any keystroke injection:

#!/bin/bash
LED SETUP
ATTACKMODE HID STORAGE
sleep 2  # Give the target time to recognize the HID device

Q GUI r
sleep 1
Q STRING "powershell"
Q ENTER

2. Timing is critical:
The most common cause is insufficient delay. The target OS needs time to:

• Recognize the USB HID device
• Be ready to accept keystrokes
• Process the Win+R shortcut

Try increasing the delay:

ATTACKMODE HID
sleep 5  # Longer delay for slower machines
Q GUI r
sleep 2  # Wait for Run dialog to actually open
Q STRING "cmd"
Q ENTER

3. Keyboard layout mismatch:
If the target has a non-US keyboard layout, Q GUI r may not map correctly. Specify the language:

DUCKY_LANG us
Q GUI r

4. Firmware version matters:
On older firmware, RUN WIN was the correct syntax. On newer firmware (1.6+), use:

Q GUI r        # Preferred modern syntax
# NOT: RUN WIN powershell  (this is legacy syntax)

5. Alternative approach if GUI r still fails:

# Try Ctrl+Esc to open Start, then type
Q CTRL ESC
sleep 1
Q STRING "cmd"
Q ENTER

If none of these work, test with a simple payload first:

ATTACKMODE HID
sleep 3
Q STRING "Hello World"

If even that doesn't type, the HID device isn't being recognized — check USB connection and try a different port.