{"id":12514,"date":"2022-08-17T15:18:15","date_gmt":"2022-08-17T15:18:15","guid":{"rendered":"https:\/\/scienceandnerds.com\/2022\/08\/17\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever\/"},"modified":"2022-08-17T15:18:16","modified_gmt":"2022-08-17T15:18:16","slug":"the-new-usb-rubber-ducky-is-more-dangerous-than-ever","status":"publish","type":"post","link":"https:\/\/scienceandnerds.com\/2022\/08\/17\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever\/","title":{"rendered":"The new USB Rubber Ducky is more dangerous than ever"},"content":{"rendered":"

Source: https:\/\/www.theverge.com\/23308394\/usb-rubber-ducky-review-hack5-defcon-duckyscript<\/a>
\n
<\/br><\/code><\/p>\n

\n

The USB Rubber Ducky is back with a vengeance.<\/p>\n

The much-loved hacking tool has a new incarnation, released to coincide with the Def Con hacking conference<\/a> this year, and creator Darren Kitchen was on hand to explain it to The Verge<\/em>. We tested out some of the new features and found that the latest edition is more dangerous than ever.<\/p>\n

What is it?<\/strong><\/h2>\n

To the human eye, the USB Rubber Ducky looks like an unremarkable USB flash drive. Plug it into a computer, though, and the machine sees it as a USB keyboard \u2014 which means it accepts keystroke commands from the device just as if a person was typing them in.<\/p>\n

\u201cEverything it types is trusted to the same degree as the user is trusted,\u201d Kitchen told me, \u201cso it takes advantage of the trust model built in, where computers have been taught to trust a human. And a computer knows that a human typically communicates with it through clicking and typing.\u201d<\/p>\n

\n <\/p>\n

<\/p>\n\"\"<\/p>\n

<\/source><\/picture>\n

<\/span><\/p>\n

<\/span><\/p>\n

Darren Kitchen with his creation, the USB Rubber Ducky<\/em><\/figcaption>Photo by Corin Faife \/ The Verge<\/cite><\/p>\n

<\/span><\/p>\n<\/figure>\n

The original Rubber Ducky was released over 10 years ago and became a fan favorite among hackers (it was even featured in a Mr. Robot<\/em> scene<\/a>). There have been a number of incremental updates since then, but the newest Rubber Ducky makes a leap forward with a set of new features that make it far more flexible and powerful than before.<\/p>\n

What can it do?<\/strong><\/h3>\n

With the right approach, the possibilities are almost endless.<\/p>\n

Already, previous versions of the Rubber Ducky could carry out attacks like creating a fake Windows pop-up box<\/a> to harvest a user\u2019s login credentials or causing Chrome to send all saved passwords to an attacker\u2019s webserver<\/a>. But these attacks had to be carefully crafted for specific operating systems and software versions and lacked the flexibility to work across platforms.<\/p>\n

\n
\n <\/p>\n

<\/p>\n\"\"<\/p>\n

<\/source><\/picture>\n

<\/span><\/p>\n

<\/span><\/p>\n

A new guidebook explains the subtleties of DuckyScript 3.0<\/em><\/figcaption>Photo by Corin Faife \/ The Verge<\/cite><\/p>\n

<\/span><\/p>\n<\/figure>\n<\/div>\n

The newest Rubber Ducky aims to overcome these limitations. It ships with a major upgrade to the DuckyScript programming language, which is used to create the commands that the Rubber Ducky will enter into a target machine. While previous versions were mostly limited to writing keystroke sequences, DuckyScript 3.0 is a feature-rich language, letting users write functions, store variables, and use logic flow controls (i.e., if this… then that).<\/p>\n

That means, for example, the new Ducky can run a test to see if it\u2019s plugged into a Windows or Mac machine and conditionally execute code appropriate to each one or disable itself if it has been connected to the wrong target. It also can generate pseudorandom numbers and use them to add variable delay between keystrokes for a more human effect.<\/p>\n

Perhaps most impressively, it can steal data from a target machine by encoding it in binary format and transmitting it through the signals meant to tell a keyboard when the CapsLock or NumLock LEDs should light up<\/a>. With this method, an attacker could plug it in for a few seconds, tell someone, \u201cSorry, I guess that USB drive is broken,\u201d and take it back with all their passwords saved.<\/p>\n

How much of a threat is it?<\/strong><\/h3>\n

In short, it could be a big one, but the need for physical device access means most people aren\u2019t at risk of being a target.<\/p>\n

According to Kitchen, the new Rubber Ducky was his company\u2019s most in-demand product at Def Con, and the 500 or so units that Hak5 brought to the conference sold out on the first day. Safe to say, many hundreds of hackers have one already, and demand will likely continue for a while. <\/p>\n

It also comes with an online development suite<\/a>, which can be used to write and compile attack payloads, then load them onto the device. And it\u2019s easy for users of the product to connect with a broader community: a \u201cpayload hub\u201d<\/a> section of the site makes it easy for hackers to share what they\u2019ve created, and the Hak5 Discord is also active with conversation and helpful tips.<\/p>\n

At a price of $59.99 per unit, it\u2019s too expensive for most people to distribute in bulk \u2014 so it\u2019s unlikely that someone will leave a handful of them scattered in your favorite cafe unless it\u2019s known to be a hangout place for sensitive targets. That said, if you\u2019re planning to plug in a USB device that you found lying out in a public place, think twice about it…<\/p>\n

Could I use it myself?<\/strong><\/h3>\n

The device is fairly simple to use, but if you don\u2019t have any experience in writing or debugging code, there are a few things that could trip you up. In testing on a Mac, for a while, I couldn\u2019t get the Ducky to enter the F4 key to open the launchpad, but I fixed it after making it identify itself with a different Apple keyboard device ID<\/a>.<\/p>\n

From that point, I was able to write a script<\/a> so that, when plugged in, the Ducky would automatically launch Chrome, open a new browser window, navigate to The Verge<\/em>\u2019s homepage, then quickly close it again \u2014 all with no input from the laptop user. Not bad for just a few hours\u2019 testing and something that could be easily modified to do something more nefarious than browse technology news.<\/p>\n<\/div>\n


<\/br><\/code><\/p>\n

Source: https:\/\/www.theverge.com\/23308394\/usb-rubber-ducky-review-hack5-defcon-duckyscript<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Source: The USB Rubber Ducky is back with a vengeance. The much-loved hacking tool has a new incarnation, released to coincide with the Def Con hacking conference this year, and creator Darren Kitchen was on hand to explain it to The Verge. We tested out some of the new features and found that the latest […]<\/p>\n","protected":false},"author":1,"featured_media":12515,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"nf_dc_page":"","om_disable_all_campaigns":false,"pagelayer_contact_templates":[],"_pagelayer_content":"","_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[15,8],"tags":[16],"class_list":["post-12514","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-policy","category-technology","tag-policy"],"yoast_head":"\nThe new USB Rubber Ducky is more dangerous than ever - Science and Nerds<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/scienceandnerds.com\/2022\/08\/17\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The new USB Rubber Ducky is more dangerous than ever - Science and Nerds\" \/>\n<meta property=\"og:description\" content=\"Source: The USB Rubber Ducky is back with a vengeance. The much-loved hacking tool has a new incarnation, released to coincide with the Def Con hacking conference this year, and creator Darren Kitchen was on hand to explain it to The Verge. We tested out some of the new features and found that the latest […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/scienceandnerds.com\/2022\/08\/17\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever\/\" \/>\n<meta property=\"og:site_name\" content=\"Science and Nerds\" \/>\n<meta property=\"article:published_time\" content=\"2022-08-17T15:18:15+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-08-17T15:18:16+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/scienceandnerds.com\/wp-content\/uploads\/2022\/08\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever_62fd06b78a319.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/scienceandnerds.com\/2022\/08\/17\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever\/\",\"url\":\"https:\/\/scienceandnerds.com\/2022\/08\/17\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever\/\",\"name\":\"The new USB Rubber Ducky is more dangerous than ever - Science and Nerds\",\"isPartOf\":{\"@id\":\"https:\/\/scienceandnerds.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/scienceandnerds.com\/2022\/08\/17\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/scienceandnerds.com\/2022\/08\/17\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/i0.wp.com\/scienceandnerds.com\/wp-content\/uploads\/2022\/08\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever_62fd06b78a319.jpeg?fit=1200%2C628&ssl=1\",\"datePublished\":\"2022-08-17T15:18:15+00:00\",\"dateModified\":\"2022-08-17T15:18:16+00:00\",\"author\":{\"@id\":\"https:\/\/scienceandnerds.com\/#\/schema\/person\/ea2991abeb2b9ab04b32790dff28360e\"},\"breadcrumb\":{\"@id\":\"https:\/\/scienceandnerds.com\/2022\/08\/17\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/scienceandnerds.com\/2022\/08\/17\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/scienceandnerds.com\/2022\/08\/17\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever\/#primaryimage\",\"url\":\"https:\/\/i0.wp.com\/scienceandnerds.com\/wp-content\/uploads\/2022\/08\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever_62fd06b78a319.jpeg?fit=1200%2C628&ssl=1\",\"contentUrl\":\"https:\/\/i0.wp.com\/scienceandnerds.com\/wp-content\/uploads\/2022\/08\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever_62fd06b78a319.jpeg?fit=1200%2C628&ssl=1\",\"width\":1200,\"height\":628},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/scienceandnerds.com\/2022\/08\/17\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/scienceandnerds.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The new USB Rubber Ducky is more dangerous than ever\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/scienceandnerds.com\/#website\",\"url\":\"https:\/\/scienceandnerds.com\/\",\"name\":\"Science and Nerds\",\"description\":\"My WordPress Blog\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/scienceandnerds.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/scienceandnerds.com\/#\/schema\/person\/ea2991abeb2b9ab04b32790dff28360e\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/scienceandnerds.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/7e6e14fc6691445ef2b2c0a3a6c43882?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/7e6e14fc6691445ef2b2c0a3a6c43882?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\/\/scienceandnerds.com\"],\"url\":\"https:\/\/scienceandnerds.com\/author\/admin\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The new USB Rubber Ducky is more dangerous than ever - Science and Nerds","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/scienceandnerds.com\/2022\/08\/17\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever\/","og_locale":"en_US","og_type":"article","og_title":"The new USB Rubber Ducky is more dangerous than ever - Science and Nerds","og_description":"Source: The USB Rubber Ducky is back with a vengeance. The much-loved hacking tool has a new incarnation, released to coincide with the Def Con hacking conference this year, and creator Darren Kitchen was on hand to explain it to The Verge. We tested out some of the new features and found that the latest […]","og_url":"https:\/\/scienceandnerds.com\/2022\/08\/17\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever\/","og_site_name":"Science and Nerds","article_published_time":"2022-08-17T15:18:15+00:00","article_modified_time":"2022-08-17T15:18:16+00:00","og_image":[{"width":1200,"height":628,"url":"https:\/\/scienceandnerds.com\/wp-content\/uploads\/2022\/08\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever_62fd06b78a319.jpeg","type":"image\/jpeg"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/scienceandnerds.com\/2022\/08\/17\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever\/","url":"https:\/\/scienceandnerds.com\/2022\/08\/17\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever\/","name":"The new USB Rubber Ducky is more dangerous than ever - Science and Nerds","isPartOf":{"@id":"https:\/\/scienceandnerds.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/scienceandnerds.com\/2022\/08\/17\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever\/#primaryimage"},"image":{"@id":"https:\/\/scienceandnerds.com\/2022\/08\/17\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/scienceandnerds.com\/wp-content\/uploads\/2022\/08\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever_62fd06b78a319.jpeg?fit=1200%2C628&ssl=1","datePublished":"2022-08-17T15:18:15+00:00","dateModified":"2022-08-17T15:18:16+00:00","author":{"@id":"https:\/\/scienceandnerds.com\/#\/schema\/person\/ea2991abeb2b9ab04b32790dff28360e"},"breadcrumb":{"@id":"https:\/\/scienceandnerds.com\/2022\/08\/17\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/scienceandnerds.com\/2022\/08\/17\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/scienceandnerds.com\/2022\/08\/17\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever\/#primaryimage","url":"https:\/\/i0.wp.com\/scienceandnerds.com\/wp-content\/uploads\/2022\/08\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever_62fd06b78a319.jpeg?fit=1200%2C628&ssl=1","contentUrl":"https:\/\/i0.wp.com\/scienceandnerds.com\/wp-content\/uploads\/2022\/08\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever_62fd06b78a319.jpeg?fit=1200%2C628&ssl=1","width":1200,"height":628},{"@type":"BreadcrumbList","@id":"https:\/\/scienceandnerds.com\/2022\/08\/17\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/scienceandnerds.com\/"},{"@type":"ListItem","position":2,"name":"The new USB Rubber Ducky is more dangerous than ever"}]},{"@type":"WebSite","@id":"https:\/\/scienceandnerds.com\/#website","url":"https:\/\/scienceandnerds.com\/","name":"Science and Nerds","description":"My WordPress Blog","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/scienceandnerds.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/scienceandnerds.com\/#\/schema\/person\/ea2991abeb2b9ab04b32790dff28360e","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/scienceandnerds.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/7e6e14fc6691445ef2b2c0a3a6c43882?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/7e6e14fc6691445ef2b2c0a3a6c43882?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/scienceandnerds.com"],"url":"https:\/\/scienceandnerds.com\/author\/admin\/"}]}},"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/i0.wp.com\/scienceandnerds.com\/wp-content\/uploads\/2022\/08\/the-new-usb-rubber-ducky-is-more-dangerous-than-ever_62fd06b78a319.jpeg?fit=1200%2C628&ssl=1","_links":{"self":[{"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/posts\/12514"}],"collection":[{"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/comments?post=12514"}],"version-history":[{"count":1,"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/posts\/12514\/revisions"}],"predecessor-version":[{"id":12516,"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/posts\/12514\/revisions\/12516"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/media\/12515"}],"wp:attachment":[{"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/media?parent=12514"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/categories?post=12514"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/tags?post=12514"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}