[Version 1] What Will The Ducky Do From An Unsuspecting Users Point Of View?

[ascorbic]

There is no avoiding it, the little ducky is cute. I would bet nine times out of ten if I left a USB ducky sitting around an office or even a street someone would pick it up and plug it into a machine.

But a command window opening up and disappearing with nothing else happening would be very suspicious.

What are some ideas to make the situation less suspicious?

Launch a webpage of a duck doing something silly?

Maybe integrate an LED/speaker into the duck and have it physically light up and quack?

Would it be possible to have the ducky be both an HID an a flash drive? This way it gives the user the appearance that the ducky is simply a flash drive. You can drop some stock images on it to make it look like someone lost it. No need to try and run malware from the flash portion, but the HID portion will still execute normally.

Actually, having a combo HID and Flashdrive would help get around the autorun issues...

Edited April 16, 2010 by ascorbic

[1n5aN1aC]

Would it be possible to have the ducky be both an HID an a flash drive?

Yes, using a sd/micro sd card:

being discussed here: http://www.hak5.org/forums/index.php?showtopic=16239

orriginally from here: http://elasticsheep.com/2010/04/teensy2-us...ith-an-sd-card/

It is definatly possible, But it might be a little dificult to get it to be both HID & Mass Storage Device at the same time.

[ascorbic]

Yes, using a sd/micro sd card:

being discussed here: http://www.hak5.org/forums/index.php?showtopic=16239

orriginally from here: http://elasticsheep.com/2010/04/teensy2-us...ith-an-sd-card/

It is definatly possible, But it might be a little dificult to get it to be both HID & Mass Storage Device at the same time.

Ahh interesting, when I first came across this I thought it was so the Teeny could ready from a microsd card.

For getting both devices to show up at the same time I was thinking they would be two completely independent devices which would appear to be connected throgugh a hub.

[Jerico_Tyler]

I've suggested in another thread to solder the hid teensy and a thumbdrive to a small hub inside the ducky. this way the pc sees both.

you actually could maybe use another teensy as a hub so you can set device names and depending on the payload type you can choose which thumbdrive to passthrough. You can see where I'm going here.