Bypass protection completely

[Lukas-abc]

Programs that were not executed with administrator rights cannot detect keyboard inputs when the task manager is in the foreground, so the protection can be easily bypassed. The only way I found to fix this is running the program as administrator.

Here is a demonstration video:
In the video you can see:

1. Run Duckhunt and execute BadUSB code normal (is blocked)
2. Run Duckhunt and execute BadUSB code in task manager (is not blocked)
3. Run Duckhunt with admin and execute BadUSB code in task manager (is blocked)

https://www.youtube.com/watch?v=sRW2ft_cLso

[pmsosa]

Ah pretty interesting, I'd have to see if there is any possible way to actually be able to access these keystrokes. However, the work around about running the program as administrator is not terrible assumption. I could probably add a quick check to figure out if it is not running as admin and request to be run as one.