Jump to content

[Version 1] What Will The Ducky Do From An Unsuspecting Users Point Of View?


Recommended Posts

There is no avoiding it, the little ducky is cute. I would bet nine times out of ten if I left a USB ducky sitting around an office or even a street someone would pick it up and plug it into a machine.

But a command window opening up and disappearing with nothing else happening would be very suspicious.

What are some ideas to make the situation less suspicious?

Launch a webpage of a duck doing something silly?

Maybe integrate an LED/speaker into the duck and have it physically light up and quack?

Would it be possible to have the ducky be both an HID an a flash drive? This way it gives the user the appearance that the ducky is simply a flash drive. You can drop some stock images on it to make it look like someone lost it. No need to try and run malware from the flash portion, but the HID portion will still execute normally.

Actually, having a combo HID and Flashdrive would help get around the autorun issues...

Edited by ascorbic
Link to post
Share on other sites
Would it be possible to have the ducky be both an HID an a flash drive?

Yes, using a sd/micro sd card:

being discussed here: http://www.hak5.org/forums/index.php?showtopic=16239

orriginally from here: http://elasticsheep.com/2010/04/teensy2-us...ith-an-sd-card/

It is definatly possible, But it might be a little dificult to get it to be both HID & Mass Storage Device at the same time.

Link to post
Share on other sites
Yes, using a sd/micro sd card:

being discussed here: http://www.hak5.org/forums/index.php?showtopic=16239

orriginally from here: http://elasticsheep.com/2010/04/teensy2-us...ith-an-sd-card/

It is definatly possible, But it might be a little dificult to get it to be both HID & Mass Storage Device at the same time.

Ahh interesting, when I first came across this I thought it was so the Teeny could ready from a microsd card.

For getting both devices to show up at the same time I was thinking they would be two completely independent devices which would appear to be connected throgugh a hub.

Link to post
Share on other sites

I've suggested in another thread to solder the hid teensy and a thumbdrive to a small hub inside the ducky. this way the pc sees both.

you actually could maybe use another teensy as a hub so you can set device names and depending on the payload type you can choose which thumbdrive to passthrough. You can see where I'm going here.

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...