Can a flash-drive just run a file instantly when it is plugged into a computer. I was led to believe it can't, and I will post my source at the bottom(Sorry, I tried to, and it said I need to have more than fifty posts to do so), but I have read up on the Rubber Ducky USB drive, and if I understand correctly this drive just injects keystrokes. How can this be used to inject reverse shells if you are locked out of the computer, and you insert the drive? I guess the question is: if you enter a USB drive into a computer, can it run a file by itself?
QUESTION ABOUT FLASH DRIVES |
![[BLANK]](https://hackforums.net/uploads/avatars/avatar_3498571.jpg?dateline=1545319363){kind=avatar}
Auto run is disabled by default but it can be enabled again. But even so the program will probably cause an action needed by user unless it is using a Windows trusted certificate.
The rubber ducky is purely an input device emulator. It's not some "l33t hacking device" that people think that it is. Based on this, I do NOT think that the rubber ducky could somehow bypass the login screen to run a file.
It can, however, start typing and doing whatever you tell it to once it's plugged in.
Feb 20, 2018 06:19 PM
(This post was last modified: Feb 20, 2018 06:48 PM by ColossalOctopus.)
(Feb 20, 2018 05:59 PM)[BLANK] Wrote: Auto run is disabled by default but it can be enabled again. But even so the program will probably cause an action needed by user unless it is using a Windows trusted certificate. Just to be clear, a flash drive can't run a file by itself if autorun is disabled, including Rubber Ducky? 
Feb 20, 2018 11:36 PM
(This post was last modified: Feb 20, 2018 11:41 PM by CyberStrike.)
RubberDucky or a WiDucky are hardware interface devices, like say a keyboard or a mouse different than a regular USB.
Edit: yeah if you are locked out of a machine and providing it is your machine or have authorization from who can make that decision you probably just can reboot and then boot up off of a live media and blank the password for example using SystemRescueCd. You can do it in WIndows as well I am sure a quick google search would help.
Feb 21, 2018 05:51 AM
(This post was last modified: Feb 21, 2018 06:03 AM by ColossalOctopus.)
(Feb 20, 2018 11:36 PM)CyberStrike Wrote: RubberDucky or a WiDucky are hardware interface devices, like say a keyboard or a mouse different than a regular USB. If a rubber ducky is just a hardware interface device, couldn't you make a device that is both a USB and Rubber Ducky in one, so when you insert it into the computer it will open the folder and automatically click on your file to run it? I don't know if they already have that, but I think it would be possible. I am just asking a question though. (Feb 21, 2018 05:51 AM)ColossalOctopus Wrote: If a rubber ducky is just a hardware interface device, couldn't you make a device that is both a USB and Rubber Ducky in one, so when you insert it into the computer it will open the folder and automatically click on your file to run it? I don't know if they already have that, but I think it would be possible. I am just asking a question though.USB is simply a serial input port. Are you talking about a USB storage drive? The rubber ducky supports a micro USD card, so I think you can put the file on that and it will be able to execute it. 
Feb 21, 2018 09:35 AM
(This post was last modified: Feb 21, 2018 09:36 AM by Baud.)
Yes, it is possible to launch an executable from the SD card of the Rubber Ducky, it works because the SD card is mounted as its own device and the script you write grabs the executable from the drive and launches it with a batch command, not through the file explorer.
OP okay some .. SOME USB drives do have the correct chipset to flash the rubberducky firmware, I am sure if you Google up DIY RubberDucky you can find it.. but the main reason it works without autoplay is because it emulates a keyboard or a mouse just imagine that you plug in a keyboard and type it works same principal here. Before inserting into the target computer you create a "DuckyScript" (Google this) the script is then made into a bin using "DuckyEncoder" (Google this too) that bin file is placed upon the RubberDucky device then taken to the target machine and inserted it now will emulate a keyboard.. mouse .. whatever running the bin file you created. Now it looks like a USB drive but it does NOT identify as such.
https://www.youtube.com/watch?v=dE_xoj7HrIc |
|
|
![[Image: fpZ5a5g.png]](https://i.imgur.com/fpZ5a5g.png)