Just one quick question. The ducky emulates a HID e.g. a keyboard. So whatever input you did on their is probably going to show up on the screen just like user doing it on keyboard? That isn't very good, is it?
Hypothetically speaking, I'd like to install a "backdoor" in someone's computer. I somehow get the ducky onto their USB port and start injecting keystrokes. The whole process, however fast it is, will show up somewhat on the screen. Wouldn't that raise suspicion? The user finds it suspicious and run anti-virus, and boom, you got caught.
And btw, do you guys have a backdoor script for recommendation? Something sleek. Finish installation backstage during the one minute or so the target plugs in the ducky. Doesn't have to do much. Just enough to give me remote admin access.
