When the USB Rubber Ducky is plugged it, it’s detected as a keyboard and it’s pre-programmed keystrokes are accepted by modern operating systems. From Windows and Mac to Linux and Android – the Keyboard is King. By taking advantage of this inherent trust, the USB Rubber Ducky executes scripted keystrokes at over 1000 words per minute. Linux payloads for an Ubuntu Desktop Windows payloads for 7/8/10 In Progress. USB Rubber Ducky Project Wiki. Following the success of the USB Switchblade, the attack platform that was super effective against local Windows targets, the Hak5 community has developed a new kind of attack - this time cross-platform (Windows, Mac, Linux) - which achieves deadly results by posing as an ubiquitous keyboard.

The USB Rubber Ducky and the Digispark board both have the same problem when attacking MacOS computers: a pop-up window with keyboard profiles that tries to identify non-Apple USB keyboards. Although an annoying setback, the solution is a simple modification that can be used to address Mac computers, which affects the ability to address Windows and Linux devices. The Apple keyboard attaches to a MacBook Mac Pro, iMac, etc. connected to try to identify the newly connected keyboard. This secret security feature, which lurks in the background on all MacOS devices, protects against malicious user data from devices like a USB Rubber Ducky worth $ 50 or Digispark. But it can easily be bypassed if the Mac thinks your attack device is an Apple device.

On Amazon: 5 Digispark ATtiny85 Micro USB Development Boards for Arduino for 10.99 USD

MacOS Vs. In the battle between Macs and HID attacks (Human Interface Device), we have macOS on one side with the Profiler Keyboard Setup Assistant. The Digispark and the USB Rubber Ducky are on the other side with a macOS payload for Rickroll users.

When we insert one of the two HID tools into the macOS computer, we are greeted by our nemesis, the keyboard profiler, before the payload has a chance to run.

There’s long been much handwringing around Halloween around the prospect of pins, needles and razor blades being hidden in candy and passed out to children. On the very rare occasion this does happen, the outcome is normally little more than some superficial cuts. However, for 2019, [MG] has developed an altogether different surreptitious payload to be delivered to trick or treaters.

Usb Rubber Ducky Tutorial

Consisting of a small USB device named DemonSeed, it’s a HID attack gadget in the genre of the BadUSB devices we’ve seen previously. When plugged in, the unit emulates a USB keyboard and can be programmed to enter whatever keystrokes are necessary to take over the machine or exfiltrate data. Files are available on Github for those looking to replicate the device.

Usb Rubber Ducky Setup

The trick here is in the delivery. [MG] has produced a large quantity of these small devices, packaging them in anti-static wrappers. The wrappers contain a note instructing children to insert them into their parent’s work computers to access “game codes”, and to share them with their friends while hiding them from adults.

Usb Rubber Ducky Hack Machine

The idea of children brazenly plugging hostile USB devices into important computers is enough to make any IT manager’s head spin, though we suspect [MG] doesn’t actually intend to deploy these devices in anger. It serves as a great warning about the potential danger of such an attack, however. Stay sharp, and keep your office door locked this October 31st!