Skip to content

Ruber Ducky review + Writing your first duckyscript | Hoxframework

Posted in VIDEOS

Hello and welcome !

This time we will be playing with some hardware : Rubber Ducky.

So when you get the Ducky you have few parts, the most important ones are the ducky (black box) and the usb-thing that takes in memory card, difference is that the usb thing is for you while ducky is for your victim. You write the code on the website (ducktoolkit.com) and export it as our inject.bin ; after that you put it on your memory card using that usb-thing. Then take it out of your PC and take out the memory card and open your ducky and place it inside the ducky, there you go you are ready ! 🙂

Check out the ducktoolkit.com to see all sorts of payloads you can generate and all sorts of posibilities to make your ducky work just the way you want it to.

The first code i use:
DELAY 1500
GUI r
DELAY 500
STRING cmd
DELAY 500
ENTER
DELAY 700
STRING color 0a
DELAY 500
ENTER
DELAY 400
STRING echo Hello world
DELAY 500
ENTER

-This one waits a second and a half (always put a longer delay when first loading the usb, the startup is always the roughest.) Then runs the cmd trough RUN and types hello world in a green text and black background (color 0a).
-The reason im putting this much delays in between every action is because you have to ,ofcourse depending on your victim’s PC specs… But to be safe we put some delay.

Second code (Changes the language to english, starts a youtube video , changes the language back.)
-If your language is on languages list when encoding a payload or generating one you dont need the language-change parts.

DELAY 2000
GUI r
DELAY 600
STRING Powershell.exe /Command Set/WinUserLanguageList /LanguageList en/GB, hr/HR /FORCE
DELAY 600
ENTER
DELAY 300
DELAY 900
GUI r
STRING start www.youtube.com/watch?v=dQw4w9WgXcQ
DELAY 700
ENTER
DELAY 500
GUI r
DELAY 600
STRING Powershell.exe -Command Set-WinUserLanguageList -LanguageList hr-HR -Force
DELAY 600
ENTER
DELAY 600

-Okay so notice how on the beginning i used / instead of –
Well thats cause my keyboard layout is foreign (Croatian) and i need English ’cause the ducktoolkit.com does not have Croatian keyboard support.
-Notice how in the second one i use the correct? Thats cause i changed the language on the beginning, now English layout will work fine because ducky attempts to write in English.

Language change command considering the victim’s layout is NOT English (This will differ on your keyboard layout but for me it was / to get – ….. Just switch to English layout and try to figure it out) -Ducky attempts to write “-” but since i have my Croatian layout it gives me something i don’t want because ducky is using English layout (or the one you pick on the site). In order to fix this we will have to figure out what key to press to get the “-” .

And that’s all !

Thank you so much for visiting and have a nice day.