Jump to content

Does Rubber Ducky's injected keystroke come from the hardware level or at the OS synthetic input (like AHK)?


Venzo
 Share

Recommended Posts

Hello, newbie here. For many of my day to day task, AutoHotKey (AHK) works great for simple scripting events. However, the keystrokes it sends is flagged as synthetic and some games I play block these inputs or the program altogether.

I'm hoping that Rubber Ducky generates keystrokes at the hardware level making it absolutely indistinguishable from a real human input on a keyboard. I have two questions:

1) Does Rubber Ducky generate keystroke at the hardware level just like a real keyboard press or does it use OS synthetic input?

2) Would renaming Rubber Ducky to "Generic Keyboard" be safer or would it not matter?

Thanks.

Link to comment
Share on other sites

As you've realized, #2 can be solved by changing the ATTACKMODE parameters.

As for simulating "more human-like input" — the USB Rubber Ducky can do this using the JITTER feature. By enabling this, all keystrokes within a payload will have randomized cadence. See https://docs.hak5.org/hak5-usb-rubber-ducky/advanced-features/jitter

Link to comment
Share on other sites

26 minutes ago, Darren Kitchen said:

As you've realized, #2 can be solved by changing the ATTACKMODE parameters.

As for simulating "more human-like input" — the USB Rubber Ducky can do this using the JITTER feature. By enabling this, all keystrokes within a payload will have randomized cadence. See https://docs.hak5.org/hak5-usb-rubber-ducky/advanced-features/jitter

Heya Darren, thanks for the response! Will be awhile but excited to try it out when it ships.

Generally speaking, does Rubber Ducky work like many other macro softwares where it uses hooks (SetWindowsHookEx, etc. etc.) for keyboard events from the OS or does it generate it at the hardware/driver level? I am hoping it is the second option.

Is it possible to order Rubber Ducky to inject a keystroke via Python if I am more comfortable with it and want to use Python's bigger library options?

Link to comment
Share on other sites

  • 2 weeks later...
On 12/5/2022 at 9:14 PM, Venzo said:

or does it generate it at the hardware/driver level?

Effectively this.
The host is just receiving keystrokes from a keyboard (in this case the duck) using the generic HID driver as if it was a physical keyboard a user was typing with. 

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...