Sinisterly
Tutorial 1$ USB Rubber Ducky alternative - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+--- Thread: Tutorial 1$ USB Rubber Ducky alternative (/Thread-Tutorial-1-USB-Rubber-Ducky-alternative)

Pages: 1 2 3 4 5 6 7

1$ USB Rubber Ducky alternative - Pikami - 08-04-2017

[Introduction]
In my opinion items from the hakshop are way overpriced, at the time of writing the price of a rubber ducky is 44.99$
ITT: I'm going to show you how to make your own keystroke injection tool for about one dollar.
For this project we'll be using a Digispark usb development board you can find them really cheap on aliexpress, I bough two of them for 1.06$ each

[Setting up the dev enviroment]
1. Download the arduino IDE (https://www.arduino.cc/en/Main/Software)
2. Install or Unzip the Arduino IDE
3. Run the IDE and go to File->Preferences
4. In the "Additional Boards Manager URLs" textbox add the URL "http://digistump.com/package_digistump_index.json" and click OK
Spoiler:
[Image: pcBhpIm.png]

5. Go to the Tools->Board->Boards Manager and then from the type drop down select "Contributed"
6. Select the "Digistump AVR Boards" package and click the "Install" button. Now wait while it finishes downloading
Spoiler:
[Image: 1bkyM2m.png]

7. If your using windows you'll have to install the Digispark Driver (https://github.com/digistump/DigistumpArduino/releases/download/1.6.7/DigistumpDrivers.zip)
8. Now go to Tools->Boards and select the "Digispark (Default - 16.5mhz)"
9. Select "USBtinyISP" in Tools->Programmer
Spoiler:
[Image: dMQnRNT.png]


[Testing example code]
You can find lots of examples for the Digispark just go to File->Examples
The example we are interested in is DigisparkKeyboard->Keyboard
1. Open the example code File->Examples->DigisparkKeyboard->Keyboard
2. Press the "Upload" button at the top (don't plug in your Digispark yet)
3. Wait for the message "Plug in device now... (will timeout in 60 seconds)" and then plug in your Digispark
4. The code will be executed when it's finished flashing
Here's a video of me flashing it:
Spoiler:



[Final notes]
The usb rubber ducky is a great tool to have, but if you don't want to spend 45$ on a keystroke injection tool, I think this is as cheap as you can get.

Why is the ducky superior to this?

- The ducky has a mSD slot (you can swap payloads easily)
- The ducky has a 32-bit 60Mhz CPU while the Digispark has a 8-bit 1Mhz micro controller (the duck is faster)
- It has an enclosure so you can disguise it as a USB drive (the ducky is inconspicuous)
- You store payloads on the sd card so you get more memory (the digispark only has about 6k of flash memory after the bootloader)

Why this is superior to the ducky?

- Instead of crying lots of mSD cards for different payloads you can carry multiple digisparks (sd cards are cheap but not as cheap as a digispark)
- They are dirt cheap
- You can customize it by adding status LEDs and DIP switches and other shit
- You can actually run your code on it! (the rubber ducky is only a keyboard, but a digispark is a whole micro processor that can run your code)

What now?

Now go, order a digispark and get to work!
I would like to see your creations and hear your success stories.
I'll make 2 more posts on this thread showing off some of my work

RE: 1$ USB Rubber Ducky alternative - Pikami - 08-04-2017

Using this to break into an android tablet.
Spoiler:



RE: 1$ USB Rubber Ducky alternative - Pikami - 08-04-2017

Using this to spawn a meterpreter reverse tcp shell
Spoiler:



RE: 1$ USB Rubber Ducky alternative - Asura - 08-04-2017

This is a great share. I would give this a try when I can.

RE: 1$ USB Rubber Ducky alternative - Bish0pQ - 08-04-2017

Very nice, when I have the time I will definitly be trying this out. Very detailed as well. Thank you for this man.

RE: 1$ USB Rubber Ducky alternative - mothered - 08-04-2017

Whilst you may need a few lessons In MS Paint (joking), your tutorial Is magnificent. Well done.

Bookmarked. Once I finish customizing my lappies and configuring my network, I shall look Into this.

RE: 1$ USB Rubber Ducky alternative - Pikami - 08-04-2017

(08-04-2017, 02:27 PM)Bish0pQ Wrote: Thank you for this man.
No problem

(08-04-2017, 03:18 PM)mothered Wrote: Whilst you may need a few lessons In MS Paint (joking), your tutorial Is magnificent. Well done.
Lol, I'm not a graphics designer, thanks

RE: 1$ USB Rubber Ducky alternative - mothered - 08-04-2017

(08-04-2017, 03:24 PM)Pikami Wrote: Lol, I'm not a graphics designer, thanks

My comment was In a joking manner.

You should see my work, you win hands down.

RE: 1$ USB Rubber Ducky alternative - Blink - 08-04-2017

I've done this with a similar microcontroller (a Chinese one with 'beetle' in the name).

It didn't last long, because there's so many things that you can do with the little things that I wouldn't want to just use it on something that I would rarely/never use.

Good thread. I know that there is plenty of people looking for something like this.

RE: 1$ USB Rubber Ducky alternative - PythonRaze - 08-06-2017

it's nice to see cheaper options for cheap penetration testers like me.