A USB Rubber Ducky Alternative! Build your own Pico Rubber Ducky!

in this tutorial you'll learn how to use a raspberry pi pico as a rubber duckie alternative in other words you'll be able to plug in your pico in any computer and it'll act as a keyboard you just give it the instructions now go ahead and plug in your raspberry pi pico then head over to your device directory now we're going to follow the steps provided in this repository right here and i will be providing a link in the description now start off by opening the first four links like so and then head over to the first one download the uf2 file you then want to head over to the second link and download the adafruit circuit python bundle 7.x now head over to the third link and save this file as code.pie [Music] lastly you want to find a payload that you find interesting i have been looking through these and i will be using the nibcap quick windows reverse shell payload [Music] now go ahead and save the payload as payload dot dd now before we continue i just want to mention real quick that if you have any problems with your pico doing the setup you can hold down the little white button marked as boot cell this will reset your device and it will generally be enough but sometimes you will need to reset your pico's flash memory as well you can head over to this website and i will provide a link in the description download the uf2 file from the resetting flash memory section now after you reset your device you can just drag and drop your uf2 file into the device folder start off by dragging the downloaded uf2 file into your device directory this will generate a set of new files on your pico now open the adafruit circuit python bundle and find the hid library [Music] there it is extracted now i want to move this library into the lib folder on your device we also want to replace code.pi on the device with the code we downloaded now if you use a us keyboard layout you're now ready to move the payload and skip to the next part of the video however if you're like me use a another keyboard layout we should go ahead and download that first to download your keyboard layout files head over to this repository right here and see if your language is supported again links will be in the description head over to releases and here you can see all the supported languages now if your language is not supported you can skip to the next section of the video otherwise go ahead and download the serger python keyboard layouts 7.x zip file go ahead and open the zip file now you're looking for three specific files the first one being the keyboard layout.npy and the keyboard layout matching your language you will also need the keycode again matching your language so for me these three files will do i'll go ahead and extract those now go ahead and move these three files into your lib folder on your kegel now we also want to modify our script or code the pi script so go ahead and open that up in your favorite text editor now you want to delete these two lines and you want to uncomment this line and that line now change the lang part of the variable to match the language you downloaded go ahead and save that you should now be ready to move your payload to your pico now be aware that if your pico is not in setup mode the script will run after a second or so so if you haven't set up your pico to be in setup mode which you most likely haven't if you've been following along in this tutorial be ready to unplug your device as soon as you've moved the payload so i'll go ahead and move the payload and i will immediately unplug my device [Music] now we are ready to test this there's been a couple days and you may have noticed that i have changed my operating system and mic settings i had a bit of trouble getting the payload i downloaded to work so i went ahead and created my own using this repo as a reference i also want to shout out irevos for creating this awesome blog post on socat encrypted bind and reverse shelves so thank you very much for that let's go over the script real quick when i plug in my piegle it'll start typing as if it was keyboard test the machine it will open up cmd in apple mode start typing this command this command will open up powershell in the background download socap from my computer extract it and use it to connect to my machine i should probably point out that you should never do this on a machine that you do not have permission to attack on my desktop and i have two virtual machines set up and ready to test my script let's plug in the pico see if i get a shell then there he goes there we go and i have full control over this machine that's awesome remember to unplug your pico afterwards otherwise the script is just going to run again but yeah that's awesome let's run a command oh my let's check what's in there as folders oh it's powershell so we can actually use colors [Music]

Channel: Hi Im AJ

Views: 20,301

Keywords: Hacking, Hak5, Reverse shell, Rubber ducky usb, Socat, Tutorial, ethical hacker, ethical hacking, ethical hacking tutorial, hacker, hacking, hacking tutorial, how to, how to hack, learn hacking, linux, netcat, reverse shell tutorial, rubber ducky, rubber ducky usb, socat tutorial, usb rubber ducky, usb rubber ducky payloads

Id: aTZelHsR75M

Length: 7min 53sec (473 seconds)

Published: Mon Jan 24 2022