Hak5 Rubber Ducky - Revision history

TLee at 11:27, 26 November 2024

2024-11-26T11:27:29Z

← Older revision		Revision as of 11:27, 26 November 2024
Line 40:		Line 40:

	=== Duck Encoder ===		=== Duck Encoder ===
	Since Rubber Ducky is not able to interpret text files natively, the scripts need to be encoded into a binary keystroke injection file. There are many tools out there and they come in different flavors, as a browser app, a cli program or with a VB GUI. They all work the same, and produce an inject.bin file. There are also decoder tools available to reverse the process and produce ducky scripts from binary files.		Since Rubber Ducky is not able to interpret text files natively, the scripts need to be encoded into a binary keystroke injection file. There are many tools out there and they come in different flavors, as a browser app, a cli program or with a VB GUI. They all work the same, and produce an inject.bin file. There are also decoder tools available to reverse the process and produce ducky scripts from binary files. An Example for de-, endcoding is [https://ducktoolkit.com/payload Hak5 Payloadstudio], Try Community Edition for free.

	=== inject.bin ===		=== inject.bin ===
Line 65:		Line 65:
	=== Encode ===		=== Encode ===
	Once the ducky script is completed, it's time to convert the human readable text file into the binary formatted inject.bin file, for example with the online Encoder IDE [https://ducktoolkit.com/payload Hak5 Payloadstudio]. After encoding place the inject.bin file to the root folder of your micro SD card.		Once the ducky script is completed, it's time to convert the human readable text file into the binary formatted inject.bin file, for example with the online Encoder IDE [https://ducktoolkit.com/payload Hak5 Payloadstudio]. After encoding place the inject.bin file to the root folder of your micro SD card.
	[https://ducktoolkit.com/payload Hak5 Payloadstudio] can also be used for decoding, in case you need to convert back a binary file to ASCII~~. There are other avialable Ducky Script de-, and encoding tools online available~~.		[https://ducktoolkit.com/payload Hak5 Payloadstudio] can also be used for decoding, in case you need to convert back a binary file to ASCII.

	=== Test and Optimize ===		=== Test and Optimize ===

TLee at 11:22, 26 November 2024

2024-11-26T11:22:48Z

← Older revision		Revision as of 11:22, 26 November 2024
Line 9:		Line 9:
	USB Rubber Ducky, is a keyboard injection tool, mainly used from penetration testers and system administrators.		USB Rubber Ducky, is a keyboard injection tool, mainly used from penetration testers and system administrators.
	The Rubber Ducky comes disguised with an innocent USB flash drive chassis, to aid in social engineering.		The Rubber Ducky comes disguised with an innocent USB flash drive chassis, to aid in social engineering.
	But under the hood hides a 60 MHz 32-bit AT32UC3B1256 CPU with 256K onboard flash, and a micro SD card storage to host the payload, which is ready to deploy with over 9000 characters per minute, once connected into an USB slot.		But under the hood hides a 60 MHz 32-bit AT32UC3B1256 CPU with 256K onboard flash, a High Speed USB 2.0 interface, and a micro SD card storage to host the payload, which is ready to deploy with over 9000 characters per minute, once connected into an USB slot.

	The device where Rubber Ducky is connected, recognizes it as a USB Keyboard. But it is also possible to change the PID/VID (Product ID/Vendor ID), so Rubber Ducky can claim to be any USB Human Interface Device (HID).		The device where Rubber Ducky is connected, recognizes it as a USB Keyboard. But it is also possible to change the PID/VID (Product ID/Vendor ID), so Rubber Ducky can claim to be any USB Human Interface Device (HID).

TLee at 11:19, 26 November 2024

2024-11-26T11:19:52Z

← Older revision		Revision as of 11:19, 26 November 2024
Line 37:		Line 37:

	=== Ducky Script ===		=== Ducky Script ===
	Ducky Script is the script language, in which payloads are written. Ducky Scripts are pure text, so any ASCII based text editor, ~~like Notepad~~, ~~Editor~~, ~~TextEdit~~, ~~etc. can be used~~. The syntax is very easy, each command (all capital letters) resides on a new line with options to follow. See [https://github.com/hak5/usbrubberducky-payloads/tree/master?tab=readme-ov-file#about-duckyscript here] a list of commands and their functions.		Ducky Script is the script language, in which payloads are written. Ducky Scripts are pure text, so any ASCII based text editor can be used, such as notepad, texteditor on Windows, textedit on Mac, Vim, Emacs, Nano, Gedit or Kate on Linux. The syntax is very easy, each command (all capital letters) resides on a new line with options to follow. See [https://github.com/hak5/usbrubberducky-payloads/tree/master?tab=readme-ov-file#about-duckyscript here] a list of commands and their functions.

	=== Duck Encoder ===		=== Duck Encoder ===

TLee at 11:15, 26 November 2024

2024-11-26T11:15:47Z

← Older revision		Revision as of 11:15, 26 November 2024
Line 64:		Line 64:

	=== Encode ===		=== Encode ===
	Once the ducky script is completed, it's time to convert the human readable text file into the binary formatted inject.bin file, for example with the online Encoder IDE [https://ducktoolkit.com/payload ~~Hak5 Payloadstudio~~ Hak5 Payloadstudio]. After encoding place the inject.bin file to the root folder of your micro SD card.		Once the ducky script is completed, it's time to convert the human readable text file into the binary formatted inject.bin file, for example with the online Encoder IDE [https://ducktoolkit.com/payload Hak5 Payloadstudio]. After encoding place the inject.bin file to the root folder of your micro SD card.
	~~You can also use the~~ [https://ducktoolkit.com/payload ~~Hak5 Payloadstudio~~ Hak5 Payloadstudio] in case you need to convert back a binary file to ASCII. ~~You can also use~~ other avialable Ducky Script de-, and encoding tools.		[https://ducktoolkit.com/payload Hak5 Payloadstudio] can also be used for decoding, in case you need to convert back a binary file to ASCII. There are other avialable Ducky Script de-, and encoding tools online available.

	=== Test and Optimize ===		=== Test and Optimize ===
Line 72:		Line 72:
	=== Deploy ===		=== Deploy ===

	* Deploy the encoded script on the USB Rubber Ducky by ~~Pasting~~ the inject.bin file onto the micro SD Card.		* Deploy the encoded script on the USB Rubber Ducky by pasting the inject.bin file onto the micro SD Card.
	* Use the USB Rubber Ducky and watch it type		* Use the USB Rubber Ducky and watch it type

TLee at 11:11, 26 November 2024

2024-11-26T11:11:31Z

← Older revision		Revision as of 11:11, 26 November 2024
Line 37:		Line 37:

	=== Ducky Script ===		=== Ducky Script ===
	Ducky Script is the script language, in which payloads are written. Ducky Scripts are pure text, so any ~~ascii~~ based text editor can be used. The syntax is very easy, each command (all capital letters) resides on a new line with options to follow. See [https://github.com/hak5/usbrubberducky-payloads/tree/master?tab=readme-ov-file#about-duckyscript here] a list of commands and their functions.		Ducky Script is the script language, in which payloads are written. Ducky Scripts are pure text, so any ASCII based text editor, like Notepad, Editor, TextEdit, etc. can be used. The syntax is very easy, each command (all capital letters) resides on a new line with options to follow. See [https://github.com/hak5/usbrubberducky-payloads/tree/master?tab=readme-ov-file#about-duckyscript here] a list of commands and their functions.

	=== Duck Encoder ===		=== Duck Encoder ===
Line 61:		Line 61:

	=== Write ===		=== Write ===
	Writing ducky scripts always starts with trying out the payload by typing it directly into the test machine using the keyboard, and make step by step notes how you completed some tasks. Once all the necessary keystroke and shortcut combinations are found to complete the attack, the actual writing of the ducky script can start. But keep in mind that all machines vary in performance, especially when dealing with GUI elements. So be sure to add enough delay in the script, so the victim hosts has time enough to follow the keystrokes~~. A payload generator for multiple OS platforms can be found the [https://ducktoolkit.com/payload Hak5 Payloadstudio]~~.		Writing ducky scripts always starts with trying out the payload by typing it directly into the test machine using the keyboard, and make step by step notes how you completed some tasks. Once all the necessary keystroke and shortcut combinations are found to complete the attack, the actual writing of the ducky script can start. But keep in mind that all machines vary in performance, especially when dealing with GUI elements. So be sure to add enough delay in the script, so the victim hosts has time enough to follow the keystrokes.

	=== Encode ===		=== Encode ===
	Once the ducky script is completed, it's time to convert the human readable file into the binary formatted inject.bin file~~. There is an~~ online Encoder IDE ~~which can be found on~~ [https://ducktoolkit.com/~~encode ducktoolkit.com]. Or download an offline version from [http://web.archive.org/web/20211118234423/https://downloads.hak5.org/api/devices/usbrubberducky/tools/jsencoder/1.0 here~~]. After encoding place the inject.bin file to the root folder of your micro SD card.		Once the ducky script is completed, it's time to convert the human readable text file into the binary formatted inject.bin file, for example with the online Encoder IDE [https://ducktoolkit.com/payload Hak5 Payloadstudio Hak5 Payloadstudio]. After encoding place the inject.bin file to the root folder of your micro SD card.
	In case you need to convert back a binary file to ~~ascii,~~ use ~~[https://ducktoolkit.com/decode this] or~~ other ~~decoding~~ tools.		You can also use the [https://ducktoolkit.com/payload Hak5 Payloadstudio Hak5 Payloadstudio] in case you need to convert back a binary file to ASCII. You can also use other avialable Ducky Script de-, and encoding tools.

	=== Test and Optimize ===		=== Test and Optimize ===

TLee at 10:47, 26 November 2024

2024-11-26T10:47:33Z

← Older revision		Revision as of 10:47, 26 November 2024
Line 3:		Line 3:

	== Requirements ==		== Requirements ==
	Rubber Ducky itself is operating system independent but you will need a pc with an USB A port (2.0 minimum) in order to be able to create and deploy your own payloads.		Rubber Ducky itself is operating system independent but you will need a pc with a standard male USB Type A port (USB version 2.0 minimum) in order to be able to create and deploy your own payloads.

	== Description ==		== Description ==
Line 27:		Line 27:
	* USB Rubber Ducky field guide		* USB Rubber Ducky field guide

	The USB micro SD Card reader to transfer the encoded ~~the~~ program onto the micro SD Card.		The USB micro SD Card reader is used to transfer the encoded program onto the micro SD Card. The reader supports FAT formatted cards up to 2 GB.
	The USB A female to micro USB male adapter allows to use the USB Rubber Ducky on mobile devices.		The USB A female to micro USB male adapter allows to use the USB Rubber Ducky on mobile devices.

Line 57:		Line 57:

	=== Research ===		=== Research ===
	Since Rubber Ducky acts as a simple preprogrammed input device, an attack is more likely to be successful, the more detailed information is gathered during reconnaissance phase, using social engineering and open source intelligence gathering techniques.		Since Rubber Ducky acts as a simple preprogrammed input device, an attack is more likely to be successful, the more detailed information of the target host is gathered during reconnaissance phase, using social engineering and open source intelligence gathering techniques.
	Once you know details about the used hardware and software running on it, try to rebuild the setup in bare metal or in a virtual environment, to test and optimize payload.		Once you know details about the used hardware and software running on it, try to rebuild the setup in bare metal or in a virtual environment, to test and optimize payload.

	=== Write ===		=== Write ===
	Writing ducky scripts always starts with trying out the payload by typing it directly into the test machine using the keyboard, and make step by step notes how you completed some tasks. Once all the necessary keystroke and shortcut combinations are found to complete the attack, the actual writing of the ducky script can start. But keep in mind that all machines vary in performance, especially when dealing with GUI elements. So be sure to add enough delay in the script, so the victim hosts has time enough to follow the keystrokes. A payload generator for multiple OS platforms can be found [https://ducktoolkit.com/payload ~~here~~].		Writing ducky scripts always starts with trying out the payload by typing it directly into the test machine using the keyboard, and make step by step notes how you completed some tasks. Once all the necessary keystroke and shortcut combinations are found to complete the attack, the actual writing of the ducky script can start. But keep in mind that all machines vary in performance, especially when dealing with GUI elements. So be sure to add enough delay in the script, so the victim hosts has time enough to follow the keystrokes. A payload generator for multiple OS platforms can be found the [https://ducktoolkit.com/payload Hak5 Payloadstudio].

	=== Encode ===		=== Encode ===

TLee at 10:28, 26 November 2024

2024-11-26T10:28:45Z

← Older revision		Revision as of 10:28, 26 November 2024
Line 3:		Line 3:

	== Requirements ==		== Requirements ==
	Rubber Ducky itself is operating system independent but you will need a pc with an USB A port in order to be able to create and deploy your own payloads.		Rubber Ducky itself is operating system independent but you will need a pc with an USB A port (2.0 minimum) in order to be able to create and deploy your own payloads.

	== Description ==		== Description ==

NKirnbauer: fixed link

2024-10-14T13:47:07Z

fixed link

← Older revision		Revision as of 13:47, 14 October 2024
Line 51:		Line 51:
	* Multiple Payload Delivery (Detour Duck)		* Multiple Payload Delivery (Detour Duck)
	* Mass Storage & HID Keyboard Emulation (Twin Duck)		* Mass Storage & HID Keyboard Emulation (Twin Duck)
	Tools to flash firmware for Unix/OSX and Windows, including a tutorial can be found [https://github.com/~~hak5darren~~/~~USB~~-~~Rubber-Ducky~~/~~wiki~~/~~Flashing-ducky~~ here] and a guide for recent Ubuntu systems here: [[USB Rubber Ducky: Firmware Update]].		Tools to flash firmware for Unix/OSX and Windows, including a tutorial can be found [https://github.com/hak5/usbrubberducky-payloads/tree/master here] and a guide for recent Ubuntu systems here: [[USB Rubber Ducky: Firmware Update]].

	== Attack Workflow ==		== Attack Workflow ==

NKirnbauer: expired link changed with link from wayback machine

2024-10-14T13:42:33Z

expired link changed with link from wayback machine

← Older revision		Revision as of 13:42, 14 October 2024
Line 64:		Line 64:

	=== Encode ===		=== Encode ===
	Once the ducky script is completed, it's time to convert the human readable file into the binary formatted inject.bin file. There is an online Encoder IDE which can be found on [https://ducktoolkit.com/encode ducktoolkit.com]. Or download an offline version from [https://downloads.hak5.org/api/devices/usbrubberducky/tools/jsencoder/1.0 here]. After encoding place the inject.bin file to the root folder of your micro SD card.		Once the ducky script is completed, it's time to convert the human readable file into the binary formatted inject.bin file. There is an online Encoder IDE which can be found on [https://ducktoolkit.com/encode ducktoolkit.com]. Or download an offline version from [http://web.archive.org/web/20211118234423/https://downloads.hak5.org/api/devices/usbrubberducky/tools/jsencoder/1.0 here]. After encoding place the inject.bin file to the root folder of your micro SD card.
	In case you need to convert back a binary file to ascii, use [https://ducktoolkit.com/decode this] or other decoding tools.		In case you need to convert back a binary file to ascii, use [https://ducktoolkit.com/decode this] or other decoding tools.

NKirnbauer: fixed link

2024-10-11T06:58:23Z

fixed link

← Older revision		Revision as of 06:58, 11 October 2024
Line 37:		Line 37:

	=== Ducky Script ===		=== Ducky Script ===
	Ducky Script is the script language, in which payloads are written. Ducky Scripts are pure text, so any ascii based text editor can be used. The syntax is very easy, each command (all capital letters) resides on a new line with options to follow. See [https://github.com/~~hak5darren~~/~~USB~~-~~Rubber-Ducky~~/~~wiki~~/~~Duckyscript~~ here] a list of commands and their functions.		Ducky Script is the script language, in which payloads are written. Ducky Scripts are pure text, so any ascii based text editor can be used. The syntax is very easy, each command (all capital letters) resides on a new line with options to follow. See [https://github.com/hak5/usbrubberducky-payloads/tree/master?tab=readme-ov-file#about-duckyscript here] a list of commands and their functions.

	=== Duck Encoder ===		=== Duck Encoder ===