Payloads Tagged "USB Rubber Ducky"

ICMP - Timing-Based Exfiltration

by TW-D September 17, 2025

This payload does covert timing-channel data exfiltration by running a local command, encoding each character’s ASCII value as a delay between network probes...

HostinfoGenerator

🏆 by PacketHouse August 16, 2025

General USB Rubber Ducky

This payload generates random hostnames, IPs, and MACs into a text file.

Brisket_Breacher

🏆 by OSINTI4L June 30, 2025

Mobile-Android USB Rubber Ducky

Brisket_Breacher is DuckyScript payload that targets the Android mobile device Google Chrome browser utilizing the Browser Exploitation Framework (BeEF). It ...

Droidex

🏆 by OSINTI4L May 30, 2025

Mobile-Android USB Rubber Ducky

Droidex exfiltrates the top file stored in the Downloads directory of target mobile device to a self-hosted python webserver over LAN.

edit2exfil

🏆 by OSINTI4L May 14, 2025

Exfiltration USB Rubber Ducky

edit2exfil is a persistent file exfiltration payload that embeds itself as a cronjob on Linux systems via bash script, running silently in the background all...

PixelReflection

🏆 by Cribbit May 11, 2025

Exfiltration USB Rubber Ducky

This payload exfiltrates files by creating a 1 pixel sized form in the top left of the screen and changes the background to black or white to represent the b...

ExfilWindowsCreds

🏆 by jakobfriedl March 16, 2025

Exfiltration USB Rubber Ducky

This collection of payloads dumps Windows Credentials using mimikatz and features multiple exfiltration methods.

Randomizing User-Agent

🏆 by Aleff February 23, 2025

Execution USB Rubber Ducky

This DuckyScript payload automates the process of modifying the Google Chrome user-agent dynamically by integrating a random user-agent

Screenshare Over LAN

🏆 by beigeworm February 04, 2025

Recon USB Rubber Ducky

This payload starts up a HTTP server and streams the local desktop to a browser window for other devices on the network.

VM Detect

by beigeworm February 04, 2025

Recon USB Rubber Ducky

This payload uses various methods to determine if the machine is a VM and will generate a console readout and verbose text file

FileHunter

🏆 by 0i41E January 03, 2025

Exfiltration USB Rubber Ducky

Crawls all drives of the target system for a specific file or file type, to then compress and exfiltrate them to the Ducky.

Silent File Exfiltrator

by itsOwen January 03, 2025

Exfiltration USB Rubber Ducky

This DS1 payload executes a stealthy script that silently collects and exfiltrates specific file types through Discord webhooks.

Global Powershell Logging and Transcription

by beigeworm January 03, 2025

Incident Response USB Rubber Ducky

This payload executes a script that logs all PowerShell input and output to a text file in the documents folder.

USB Poison

🏆 by beigeworm January 03, 2025

General USB Rubber Ducky

This payload executes a script that waits for new USB flash storage devices to be connected. When a new device connects, this script will copy a desired file...

$Execute commands as NT AUTHORITY\SYSTEM with TrustedInstaller privileges$

Execute commands as NT AUTHORITY\SYSTEM with TrustedInstaller privileges

by TW-D November 24, 2024

Execution USB Rubber Ducky

This payload launches a new cmd.exe process with elevated privileges under TrustedInstaller, by setting the TrustedInstaller process as the parent, the cmd.e...