Usb Rubber Ducky

You might also like

Download as docx, pdf, or txt
Download as docx, pdf, or txt
You are on page 1of 5

After installation Open Arduino IDE application, go to File -

> Preferences
In the input field named “Additional Boards Manager URLs” enter the
following URL.

http://digistump.com/package_digistump_index.json

Open Arduino IDE — Preferences Tools -> Board -> Boards Manager
From the drop down menu select “Contributed”, Select the Digistump
AVR Boards package and install it.
Now we need to install Digispark Bootloader Driver. You only need the
driver to program it with arduino. Once you program it, it’ll work like a
rubber ducky (a generic USB keyboard) on any device you plug it into
without any driver.

https://github.com/digistump/DigistumpArduino/releases/do
wnload/1.6.7/Digistump.Drivers.zip

Usually there will be some issues with the driver installation process. So
please make sure to install the drivers properly.

Finally, go to Tools -> Board, and select Digispark (Default —


16.5mhz) and set it as default.

Step 2: Turning Digispark into a Rubber Ducky Clone


Rubber Ducky uses a simple scripting language to create payloads. For
Digispark, things are not that simple. We need to program our own
payloads using Digikeyboard.h and Arduino IDE. There are some
scripts available for Digispark ATTiny85 in the internet. But thanks to the
work of MaMe82 (Marcus Mengs) you can translate Rubber Ducky Scripts
to Digispark with duck2spark project.

https://github.com/mame82/duck2spark?source=post_page-----5d59afc1910-------------------
---

A great feature of Duck2spark is that available solutions and tutorials


emulating a RuberDucky-like on a DigiSpark suffer from poor keyboard
layout support for non-US languages. This is solved by “outsourcing” the
problem to DuckEncoder which supports multiple keyboard layouts.

Using Duck2spark is really easy. Let’s see an example of the duck2spark


documentation, a classic hello world:
Click Sketch -> Upload or click Upload button on the top left. Open a
notepad or any software. Plug in the Digispark USB again and magically
“Hello World” will be typed.

Rubber Ducky Payloads can be anything; It changes as per our goals and
intentions! We can Create Wireless Network Association, Download and
execute payloads, reverse shells, etc. For pen testing engagements we can
even use Meterpreter, Empire, Unicorn, or any other powershell payloads.

https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Payloads?source=post_page-----
5d59afc1910----------------------

Troubleshooting

If you are able to program your Digispark and the code runs, but the
sketches do not run after the Digispark is unplugged and plugged in again:
You will need to update the bootloader. The bootloader has a built in
updating mechanism. To flash the bootloader use the guide here and the
Digispark will work and run the sketches after unplugging and plugging
back in.

Keep in mind that Digispark is OSHW (Open Source HardWare), there are
no original Digispark or clone Digispark, they are all the same! The only
difference is that some manufacturers flash old versions of the bootloader.

Tips

Digispark use do not end here, as an Arduino compatible development


system it can be used for any Arduino based attack with minimal
modifications. Even to use it for HID attacks is not essential to run
Duck2Spark, if you want to work USB HID at low level Digispark has a
built-in keyboard library called Digikeyboard.
A final tip for your Rubber Ducky clone: use some heat shrink tubing to
provide electrical insulation, mechanical protection, sealing, and some
stealth to your new Digispark-Ducky. A device that’s cheap enough that
you don’t mind leaving it at the scene if you’ve got to pull on your ninja
outfit and make a break for it.

You might also like