Rubber Ducky Gt

0 views
Skip to first unread message

Mariu Carlton

unread,
Aug 5, 2024, 3:22:54 AM8/5/24
to ciabainoho
whatformat? If your PC/MAC/Linux? box can read it but the error looks like the Ducky cant read it then format would be likely cause. Also visually check there's no fluff/dirt in the sd card slot, squirt of can air if you got it.

Else maybe you tried flashing one of the 3rd party firmware's and bricked the ducky? If so then try and get back to DFU boot mode by holding in button while plugging in. You may need drivers. But if hardware is detected (ideally a DFU device) then you should be able to recover. However if you cant get a working DFU bootmode (if there was a bad flash or not) then it looks like it may be a dead duck.


Hi friends I read all the posts here and I understand I have a similar problem, I tried to buy another sd card and in both cases the duck stays solid red. Do i Need to create a specific folder on the sd? Because I just put the bin file normally alone




You can also try to format the SD card in the same way as I've described it in my post linked below. It's aimed for the WiFi Pineapple Nano, but I use the same procedure for the Ducky as well, so it's "transparent".


I appreciate your response, I put the file this way on two different sd cards (the same one I got in the order and another one I made sure I had for backup) in both cases as soon as I connect the ducky to the computer I get a solid red light.

I have gone over the possible problems here ( -us/articles/360010555093-My-USB-Rubber-Ducky-shows-a-solid-red-LED-now-what-) and I can not troubleshoot where the problem is in my case.



maybe someone how sees this can share some wisdom with me ?


The truth is I have already tried with three different sd cards, and the problem remains, the support gave me steps to go through them but they also did not really solve the problem and I am pretty stuck


I did received mine today as well. However mine worked fine. I had the feeling that it was not going to do anything, but it did lighted up with a green led. A quick tip, do not use the SD card reader that comes with the Ducky. instead use another one. Mine SD card came blank, with no inject.bin. so I created one, the hello world to be exact, and then loaded it to the SD card and popped to to Ducky and it did worked just fine. I am totally new to the Ducky, so as long as I achieve what I'm trying to accomplish, I will give the Ducky 10 stars. ?


I got my ducky a few days ago and when i plugged it in for the first time nothing happened. I knew that a Hello World script was supposed to run. I thought that maybe it needed the right firmware so i flashed it with c_ducky.v2.1.hex using the master zip. I contacted Hak5 regarding my issue but still no response. I wrote my script, encoded it, and put it on the sd card. Still nothings happening. Please Help!


Nothing happened on screen, an USB Rubber Ducky-like device should show something on screen, right? There is no way that it has compromised our company system with some lightspeed commands impossible to see at naked eye, right?


There's no danger with inserting this device in your computer. It's just a dongle for a laser engraver software suite named WingraverXP supplied with some budget laser machines. I have one of the machines and it's supplied with an identical USB stick.


In a similar vein to what your mother may have told you as a young child about accepting packages from strangers, when you find a strange USB drive in a warehouse filled with Chinese screwdrivers, or whatever it happens to be, do not plug it in to a computer that is part of your company's network. Ever.


That is really the best way of "protecting Windows systems from USB devices like this". Having said that, as James said in the comments, the first and obvious methods of attack would be blocked by turning off the removable drive auto-run feature, but if someone really want to harm a computer, I am sure a talented hacker could do so without the auto-run enabled.


Next time you have a weird USB stick fall from the sky like that and you want to see what it is, you connect it to a computer that is not part of any network, has no internet connection and no critical data.


Now, chances are there is an irate docker somewhere on the shores of China lamenting the loss of his wireless keyboard, nothing nefarious was in the drive and absolutely nothing is wrong with your computer. As a general rule though, you don't connect strange devices to networks.


I don't think there is a way of actually detecting a rubber ducky. The good news is that the best known one does not look like the picture you posted. On the other hand, what the hypothetical USB fowl does depends entirely on its payload and cannot be predicted. There will, therefore, not be a rock solid way of checking since you cannot know beforehand what it attempted to do.


If your drive really identifies as a keyboard, the safest way to determine which keystrokes it sends, is probably a hardware USB keyboard logger. You can get those all over the internet, just google "usb keyboard logger".


Since you probably don't want to disable support for USB HID and keyboard devices, I don't think there is anything you can do to prevent such attacks, other than not plugging untrusted devices into your machine.


EDIT: Since I am unable to comment on the other answers: Disabling auto run only prevents the automatic execution of files on the connected USB drive. However, if this device identifies as a keyboard, it will likely send keystrokes and not offer you files. Disabling auto run does not protect you against keystrokes.


HID (ie, keyboard) emulation is only one thing that a USB device can do. It can also pretend to be an ethernet interface, or a modem, and offer "network access" to the PC. If the OS helpfully autoconfigures it, and decides to use it, then the device will be able to sniff the network traffic, spoof DNS queries, etc.


Now, if you're only interested in stopping this and not the other attacks, you can stop it with software that will detect an excessive typing speed. That won't stop a slow rubber ducky of course. You could check the USB VID/PID of the keyboard, but a USB device can easily spoof these.


I would think it would be as simple as disabling new hardware from being installed in group policies. Making 1 administrator user and the rest of the users near administrator not allowing hardware drivers to be installed and new hardware to be enabled to the computer system would disable a bad USB/rubber ducky's attack so any rubber ducky or bad USB would be rendered useless.


Of course you also would have to disable your CMOS/BIOS if you are worried about attempts from boot up but in Windows, Linux, or just about any other OS out there you should be able to disable the hardware that easy.


Now, the pain in this is that if you want a new flash drive or any other USB device to be used on that computer you would have to go on as the administrator and set it up, but that would stop the attacks.


We're nearly done with the 14 Days of Summer here in Fortnite: Battle Royale, and if you want that smoothy back bling, you'll need to complete all the challenges on offer. And of course you do! Fortnite is a game for tough competitors and ravenous collectors alike, and the latter group wants all the stuff there is to get because it's stuff, and stuff is great. This tiny rubber ducky in the loading screen challenge, however, is somewhat vexing.


The Tiny Rubber Ducky challenge is one of the most difficult of the bunch. for a couple of reasons. To start with, it's just a bit complex: Epic has been making the "hidden in the loading screen" challenges a lot more difficult than they did last season, and this is one of those where you have to interpret the coordinates written somewhere in the screen: the surfboards, if you were wondering, and the ducky is down in a bathtub in the desert But that's not the only reason.


Here's the issue: the ducky disappears when you search it, which means nobody else can search it that match. I'm having a hard time figuring out if this is a bug or a feature. This has happened with challenges before: things like fireworks, grills, balloons and more are only there for one player to launch, destroy or pop. But there are a bunch of those, and there's only one of these duckies. This means that only one player can complete this challenge per match, which is hugely vexing: you could spend ten matches trying to get down there to search the thing before getting pickaxed to death by other eager searchers. It's almost like a mini battle royale there at the beginning of the game.


If this is intentional, it's at least brilliant in accomplishing a certain sort of goal: creating an insane scrum around a random bathtub in the desert. It does seem like more of a bug to me, however. These challenges are typically intended to be fun little things that let people feel successful even if they don't really stand a chance of making it to the end and claiming victory royale, so putting something in there that forces so much conflict into a non-combat challenge feels unintentional. I wonder if the developers will patch it, but there's a lot more to be done now that they're back from break.


LinkedIn and 3rd parties use essential and non-essential cookies to provide, secure, analyze and improve our Services, and to show you relevant ads (including professional and job ads) on and off LinkedIn. Learn more in our Cookie Policy.

3a8082e126
Reply all
Reply to author
Forward
0 new messages