Jump to content

Archived

This topic is now archived and is closed to further replies.

ascorbic

[Version 1] What Will The Ducky Do From An Unsuspecting Users Point Of View?

Recommended Posts

There is no avoiding it, the little ducky is cute. I would bet nine times out of ten if I left a USB ducky sitting around an office or even a street someone would pick it up and plug it into a machine.

But a command window opening up and disappearing with nothing else happening would be very suspicious.

What are some ideas to make the situation less suspicious?

Launch a webpage of a duck doing something silly?

Maybe integrate an LED/speaker into the duck and have it physically light up and quack?

Would it be possible to have the ducky be both an HID an a flash drive? This way it gives the user the appearance that the ducky is simply a flash drive. You can drop some stock images on it to make it look like someone lost it. No need to try and run malware from the flash portion, but the HID portion will still execute normally.

Actually, having a combo HID and Flashdrive would help get around the autorun issues...

Share this post


Link to post
Share on other sites
Would it be possible to have the ducky be both an HID an a flash drive?

Yes, using a sd/micro sd card:

being discussed here: http://www.hak5.org/forums/index.php?showtopic=16239

orriginally from here: http://elasticsheep.com/2010/04/teensy2-us...ith-an-sd-card/

It is definatly possible, But it might be a little dificult to get it to be both HID & Mass Storage Device at the same time.

Share this post


Link to post
Share on other sites
Yes, using a sd/micro sd card:

being discussed here: http://www.hak5.org/forums/index.php?showtopic=16239

orriginally from here: http://elasticsheep.com/2010/04/teensy2-us...ith-an-sd-card/

It is definatly possible, But it might be a little dificult to get it to be both HID & Mass Storage Device at the same time.

Ahh interesting, when I first came across this I thought it was so the Teeny could ready from a microsd card.

For getting both devices to show up at the same time I was thinking they would be two completely independent devices which would appear to be connected throgugh a hub.

Share this post


Link to post
Share on other sites

I've suggested in another thread to solder the hid teensy and a thumbdrive to a small hub inside the ducky. this way the pc sees both.

you actually could maybe use another teensy as a hub so you can set device names and depending on the payload type you can choose which thumbdrive to passthrough. You can see where I'm going here.

Share this post


Link to post
Share on other sites

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...