Make your own USB Rubber Ducky using a normal USB stick _.pdf

9/3/2016

Make your own USB Rubber Ducky using a normal USB stick |

Z My Basket: €0.00

0 items

Did Di d you ever wanted to make your own USB Rubber Ducky?

Well now you can using a regular USB stick, i must start with mentioning that it can

not be done with all

the USB sticks you will need one with a specific Nand chipset on it. More specific the Phison 2251-03 (2303) So now you are probably wondering where do i get that specific usb stick then, and how do i know what chipset is on it? On github there is a list with all know compatible devices, but most off them are not for sale anymore. https://www.pentestingshop.com/pentesting/make-your-own-usb-rubber-ducky-using-a-normal-usb-stick/

1/111

9/3/2016


So what do i do then ? Well you can buy one in my webshop

€24.99 Read more

So this is what u need to get started, and you will also need the following things: FILE ONE: The Zip file from github found here : LINK

https://www.pentestingshop.com/pentesting/make-your-own-usb-rubber-ducky-using-a-normal-usb-stick/

2/111

9/3/2016


FILE TWO: Visual Studio 2012 Express which can be downloaded here : LINK


3/111

9/3/2016


File THREE: SDCC (Small Device C Compiler) which can be downloaded here : LINK


4/111

9/3/2016


FILE FOUR: Java Runtime Environment 7 which can be downloaded here : LINK


5/111

9/3/2016


FILE FIVE: Duckencoder.jar which can be downloaded here : LINK

FILE SIX:


6/111

9/3/2016


The Burner image and firmware for flashing the USB stick Which can be download here : LINK ============================================== Now that u downloaded all these files u are ready to install them! Follow along with me for how to install all this properly So we only need to install 3 things (cause other are just zip packages you will need). Let’s begin with Microsoft Visual Studio Express 2012

Step One : Go to the location where u downloaded the Visual Studio Express 2012 setup Mine is in Downloads so double click this icon where u saved it

now follow along with the procedure shown below.


7/111

9/3/2016


Now make sure u check the box I agree to the License terms and conditions and click INSTALL u should then see the following things pass by


8/111

9/3/2016



9/111

9/3/2016



10/111

9/3/2016



11/111

9/3/2016



12/111

9/3/2016


and when it’s done u should see this


13/111

9/3/2016


u now need to press the LAUNCH button to start Visual Studio Express From the moment u pressed LAUNCH u should see this


14/111

9/3/2016


Click on the Register Online (Dont worry u will not need to pay anything cause this is a free version, but you must sign in using a existing e-mail address u have at Microsoft) like shown here


15/111

9/3/2016


So fill in the email address and password you have at Microsoft (aka hotmail.com, outlook.com,..etc) and click Sign In next u should see this


16/111

9/3/2016


now when u see this the email address you signed in with should be automatically be filled in, i blanked out mine(for spam reason) but in the Dropdown menu where it’s asking Are you registering Visual Studio for Academic, Business or Personal use? u should choose Personal And where it’s asking Are you creating software for public distribution, online use by others or private use? u should choose Private Use Once u did all this Click on Continue U should now get this


17/111

9/3/2016


Your Product Key for activating the Visual Studio Express 2012 So copy the Product Key and go back to the pop-up u started with


18/111

9/3/2016


And paste the Product Key in the field and Click Next when u did this and everything is fine u should get this


19/111

9/3/2016


so click Close and next u will end up in Visual Studio Express 2012


20/111

9/3/2016


since we don’t need it right away u can close the program for now.

Step Two : Next we are going to install SDCC (Small Device C Compiler) so double click this icon where u download it to mine is again also under Downloads

now follow along with the pictures below


21/111

9/3/2016



22/111

9/3/2016


Now the next step is Very Important! U should make sure u are installing it to C:\Program Files\SDCC


23/111

9/3/2016


after u clicked Install u should see it installing like shown here below

And followed by this


24/111

9/3/2016


So now click Next

And click Finish U are now done with installing SDCC (Small Device C Compiler)


25/111

9/3/2016


Step Three : We are now going to install Java Runtime Environment 8 well be needing this to run Duckencoder.jar Now again go to the location where u saved the installer and double click this icon

and follow along with the pictures below

when u see this click Install


26/111

9/3/2016


and yes it’s true 3 Billion Devices Run Java maybe even your microwave when the setup process is complete u should get this

So now that it’s done click Close


27/111

9/3/2016


Setting things up: Unpacking the Psychson-master.zip u downloaded from github (so FILE ONE)

So browse to the location where u downloaded it to, mine again is in Downloads And now where u see this icon right click on it and select Extract Here like shown here below

Now that u did this u should get the Folder Psychson-master in the location where u started from so in my case C:\Users\Pentestlab\Downloads>


28/111

9/3/2016


Now that u have this folder we should copy it to another location.

I highly suggest you do exactly the same as i do so that afterwards u can download my help file with the commands in it. So now right click on the folder Psychson-master and select copy like shown here


29/111

9/3/2016


Now that u copied the file Open My Computer and go to your C:\ And create a new folder called fw (all in lowercase) like shown below:


30/111

9/3/2016


Now open that folder fw that u just created and paste the Psychson-master folder inside!


31/111

9/3/2016


u should then have the folder Psychson-master inside the folder c:\fw\ like shown here

So now that u pasted the folder Psychson-master here where going to place all the other files we need here under c:\fw since you are now in the folder c:\fw right click here and create a new folder called fw_bn like shown here


32/111

9/3/2016


now create another folder called ducky like shown here


33/111

9/3/2016


now on top u downloaded file six and it is named firmware_ps2251-03.rar it should be in your Downloads folder at this time, but we need to place it in the fw_bn folder and extract it there so copy the firmware_ps2251-03.rar file from your Downloads folder like shown below

and paste it under c:\fw\fw_bn like shown here


34/111

9/3/2016


And now that u pasted the file firmware_ps2251-03.rar here under c:\fw\fw_bn u should extract it here like shown here


35/111

9/3/2016


u should then have this


36/111

9/3/2016


But now we need to get some files out off this folder and copy it to this location c:\fw\fw_bn So open the folder Firmware PS2251-03 like shown here below and copy the files BN03V104M.BIN and FW03FF01V10753M_20130621.BIN like shown here

So now that u copied these files go back one folder so to the folder c:\fw\fw_bn and paste these 2 files here so like this


37/111

9/3/2016




38/111

9/3/2016


The files BN03V104M.BIN and FW03FF01V10753M_20130621.BIN under c:\fw\fw_bn Now that this is done u should move on to the next step The next step is copying the file duckencoder.jar to c:\fw\ducky So go to the location where u saved duckencoder.jar my is still under Downloads so i need to copy it like shown here

now that u copied this file we should move it to c:\fw\ducky so go to the location c:\fw\ducky and paste the file duckencoder.jar here like shown here


39/111

9/3/2016




40/111

9/3/2016


the file duckencoder.jar in the folder c:\fw\ducky so you should now have the folders ducky, fw_bn and Psychson-master in c:\fw like shown here

So listed out for u once more duckencoder.jar (file five on top) under c:\fw\ducky BN03V104M.BIN and FW03FF01V10753M_20130621.BIN (file six on top) under c:\fw\fw_bn and the extracted github zip file (file one on top) under c:\fw (the folder in the zipfile from github is already called Psychson-master) so make sure u don’t have this folders double! Now we are ready with putting all the files in place!

COMPILING ALL THE THINGS So the next step is to compile all the stuff


41/111

9/3/2016


So go to c:\fw\Psychson-master\DriveCom and open the file DriveCom.sln like shown here

So you should just double click on DriveCom.sln and get this


42/111

9/3/2016


now that u see this u should click in the top bar on Start like shown here

Once u clicked on start u should see this


43/111

9/3/2016


Now that u see this u should Close the window where it says “No action specified, entering console” First like shown here

after u closed the command prompt window u should close the Visual Studio like shown here


44/111

9/3/2016


Now go to c:\fw\Psychson-master\Injector like seen here

And double click on Injector.sln to open it in Visual Studio Express https://www.pentestingshop.com/pentesting/make-your-own-usb-rubber-ducky-using-a-normal-usb-stick/

45/111

9/3/2016


u should then see this

again now that u see this u should click in the top bar on Start like shown here

now once you clicked start u should get this


46/111

9/3/2016


you should see some text in Output so next close Visual Studio again like shown here

So once you clicked the close button we should now go to following location c:\fw\Psychson-master\EmbedPayload https://www.pentestingshop.com/pentesting/make-your-own-usb-rubber-ducky-using-a-normal-usb-stick/

47/111

9/3/2016


and open the file EmbedPayload.sln like shown here

Now once you double clicked this file u should see this


48/111

9/3/2016


now that u see this u should click in the top bar on Start like shown here

Once you did click in start you should again see some output text below like seen here

now that this is done close Visual Studio again like shown here https://www.pentestingshop.com/pentesting/make-your-own-usb-rubber-ducky-using-a-normal-usb-stick/

49/111

9/3/2016


Now all the compiling is done so let’s get one more thing we need to make it complete the thing we need is a script for putting on the self made USB rubber ducky we will be getting the Hello world script from the github so go to to this website : LINK you will then see this


50/111

9/3/2016


So as you see in the picture u now need to click on the link to Payload – Hello World u will then come to this page


51/111

9/3/2016


so as you see in the picture we need to select all the text marked in blue and then right click and choose Copy Now that u copied this text we need to go to the following location c:\fw\ducky and create a new text file like shown here

And name the file HelloWorld.txt like shown here


52/111

9/3/2016


now that u created the text file HelloWorld.txt under c:\fw\ducky open it by double clicking on it and then we need to paste the code we copied from the github page inside the HelloWorld.txt so in the empty document right click and choose Paste and you should then have this


53/111

9/3/2016


Now that the code is inside we need to save it


54/111

9/3/2016


and close it like seen here below

So now that this is done we can start playing with the stick First we are going to check if the stick really has the Phison 2251-03 (2303) chipset we can check this by downloading the software called GetFlashInfo get it from this LINK when downloaded go to the location u saved it to mine is standard in Downloads u should there see the zip file u downloaded

now right click on this and choose Extract here https://www.pentestingshop.com/pentesting/make-your-own-usb-rubber-ducky-using-a-normal-usb-stick/

55/111

9/3/2016


like shown here

u should then open the folder named usbflashinfo

so double click on this folder and you should then see these files


56/111

9/3/2016


So now

Insert your USB stick and double click on GetFlashInfo.exe

u should then see this

u should get this back as response


57/111

9/3/2016


It’s very important that u get Phison 2303 (2251-03) as Controller Normally if you bought a USB stick from my webshop it should be fine! So now that we now for sure that the stick u have has the right nand chipset we can start making the USB Rubber Ducky so first download this file i created with all the commands u will need for making the USB Rubber Ducky from this LINK For convenient work save the file under c:\fw so you should now have this file like shown here


58/111

9/3/2016


So now that u have my commandsguide.txt file double click on it and you should see this


59/111

9/3/2016


So now leave the text file open and click on START and type cmd and then right click on Command Prompt and choose Run as Administrator like shown here

you should then get this

So now go back to the text file u downloaded from my LINK (commandguide.txt) and copy the first line like shown here https://www.pentestingshop.com/pentesting/make-your-own-usb-rubber-ducky-using-a-normal-usb-stick/

60/111

9/3/2016


Now that u copied the first line go back to the command prompt and right click and choose paste like shown here

u should then get this


61/111

9/3/2016


when u pasted this press ENTER and you should then see this

a new line and no errors if you see error on line 1 you should check the file HelloWorld.txt maybe it’s still empty so now the command u just ran converted the HelloWorld.txt to a inject.bin using the duckencode.jar Next we need to make a firmware file


62/111

9/3/2016


so go to C:\fw\Psychson-master\firmware

and you should see the files like shown here

So now that u are in this folder u should double click on build.bat like shown here


63/111

9/3/2016


u should see some thing happening in a command prompt and then it automatically closes, but afterwards you should now see a bin folder in this location like shown here


64/111

9/3/2016


So next step we go back to the text file u downloaded from my website and we are going to copy the second line like shown here


65/111

9/3/2016


Now that u copied this go back to the command prompt and paste it there (if you closed the cmd, be sure u run it again as Administrator) like shown here


66/111

9/3/2016


u should then get this

Now that u pasted the second line in the Command Prompt u should press ENTER and when successfully you should see it print out File updated like shown here


67/111

9/3/2016


Now that this is done re-insert you USB stick


68/111

9/3/2016


Now that the stick is your USB port open My computer and

what

the USB Stick has.

like shown here


69/111

9/3/2016


So make sure u remember the drive letter that has been assigned to your USB Stick! So now go back to the text file u got from my website and copy the line under SET

USB STICK

IN BOOTMODE like shown here


70/111

9/3/2016


Like seen in the picture make sure that u change the drive letter to yours! so where /drive=G is change the G to the drive letter that has been assigned to your USB Stick! Now that u copied this line switch back to the Command Prompt and paste it there like shown here


71/111

9/3/2016


when u clicked paste u should get this

When u did this u can press ENTER and u should then get this


72/111

9/3/2016


Also if you removed the casing around the USB Stick u bought from my webshop u should see that the blue led stays on So now that the USB Stick is in BootMode

Go back to the text file and copy the line under SET

ACTION TO SEND EXECUTABLE

USING BURNER IMAGE like shown here


73/111

9/3/2016


So now that u copied this line switch back to the Command Prompt and paste it there like shown here

again when u clicked paste https://www.pentestingshop.com/pentesting/make-your-own-usb-rubber-ducky-using-a-normal-usb-stick/

74/111

9/3/2016


u should get this

Now that the line is pasted u can press ENTER and you should then see this

Now that this is done switch back to the text file

and copy the line under DUMP

THE ORIGINAL FIRMWARE


75/111

9/3/2016


like shown here

Now that u copied this line switch back to the Command Prompt and paste it there like shown here


76/111

9/3/2016


Now when u clicked paste you should see this

Now when u pasted it you can press ENTER and should see this


77/111

9/3/2016


Now that this is done switch one more time back to the text file and copy the line

under SEND

PAYLOAD TO FIRMWARE

like shown here


78/111

9/3/2016


now that u copied this line switch back to the Command Prompt and paste it there like shown here

Now when u clicked paste you should get this

Now that it’s pasted u can press ENTER and you should see this


79/111

9/3/2016


You now just flashed your own USB Rubber Ducky using a regular USB Stick Like 4

U Michael

Tweet

1

P April 22, 2015 at 10:32 pm

Follow

K Permalink

Share 4

S

Thanks for this tutorial. The hello world script work but how could i change the script. h Reply

U pentestshop

P April 24, 2015 at 11:20 pm

K Permalink

S

U will need to flash the USB-stick back to stock first, you do this by using a tool from the flash vendor. Sadly i cant specific tell which one since i don’t know on what USB-stick u did this? So what


80/111

9/3/2016


is the vendor? Corsair,Kingston,Patriot,..? But u also need to shorten the pins first before u can do this, shortening the pins set it’s back in flash mode. Its pin 2 and 3 on the Phison 2251-03 chip h Reply

U Michael

Permalink

P April 25, 2015 at 8:58 pm

K

S

I use the Corsair Voyager LS . h Reply

U pentestshop

P May 25, 2015 at 12:25 pm

K Permalink

S

http://www.pentestingshop.com/recover-a-usb-stick/ h Reply

U WhiteRabbit

P May 7, 2015 at 10:41 pm

K Permalink

S

This is great, really good work, excellent explanation, i got the Kingston Digital 8GB USB 3.0 DataTraveler (DT100G3/8GB), if i want to add a different payload, i need to flash it back to stock and re do all process again? isnt there another way to do it? thanks! h Reply

U pio

P May 19, 2015 at 8:43 am

K Permalink

S

Have you tried? Did it work?


81/111

9/3/2016


i got the Kingston Digital 8GB USB 3.0 DataTraveler (DT100G3/8GB), too Thanks! h Reply

U pentestshop

P May 25, 2015 at 12:25 pm

K Permalink

S

U need to do this http://www.pentestingshop.com/recover-a-usb-stick/ h Reply

U Single Core

P May 17, 2015 at 8:43 pm

K Permalink

S

Awesome, it works. But now I have the problem of flashing another script. I would like to restore the original firmware as mentioned above but I used this ghetto USB drive which has the correct controller. But I can’t seem to find a tool to revert the software. Any input would be appreciated. h Reply

U pentestshop

P May 25, 2015 at 12:23 pm

K Permalink

S

Sorry for the late reply but i was working on this guide, it’s actually very simple. So go to this link and follow this process http://www.pentestingshop.com/recover-a-usb-stick/ h Reply

U SomeOne

P June 7, 2015 at 11:13 am

K Permalink

S

Hi, thank you for the detailed Manual, but i got still one (for me very important) question. https://www.pentestingshop.com/pentesting/make-your-own-usb-rubber-ducky-using-a-normal-usb-stick/

82/111

9/3/2016


I got several USB-Sticks with the Phison 2303 (2251-03) Controller, most of them are: Manufacturer: TOSHIBA Product: TransMemory Mx Do i also have to take the two files “BN03V104M.BIN and FW03FF01V10753M_20130621.BIN” or should i take other files cause i don’t have the same Stick u use ??? You wrote:”So open the folder Firmware PS2251-03 like shown here below and copy the files BN03V104M.BIN and FW03FF01V10753M_20130621.BIN” I’m afraid of “damaging” the stick …. hope you can help me!!!! —————————————————————————— Detailed Information of the Stick using FlashDriveInfoExtractor: Volume: J: Controller: Phison 2303 (2251-03) Possible Memory Chip(s): Toshiba TH58NVG8T2JTA20 Toshiba TH58TEG8T2JTA20 Toshiba TC58NVG7T2JTA00 Toshiba TC58TEG7T2JTA00 Memory Type: TLC Flash ID: 983AA892 7657 Chip F/W: 02.08.53 Firmware Date: 2014-01-02 ID_BLK Ver.: 1.2.65.0 MP Ver.: MPALL v3.29.0C VID: 0930 PID: 6545 Manufacturer: TOSHIBA Product: TransMemory Mx Query Vendor ID: TOSHIBA Query Product ID: TransMemory Mx Query Product Revision: PMAP Physical Disk Capacity: 31212699648 Bytes Windows Disk Capacity: 31191793664 Bytes Internal Tags: 2Q6P-S74J File System: FAT32 Relative Offset: 4032 KB USB Version: 3.00 in 2.00 port Declared Power: 300 mA ContMeas ID: 76B0-02-00 Microsoft Windows 7 SP1 x64 https://www.pentestingshop.com/pentesting/make-your-own-usb-rubber-ducky-using-a-normal-usb-stick/

83/111

9/3/2016


h Reply

U pentestshop

P June 7, 2015 at 12:25 pm

K Permalink

S

Yes you must use the files BN03V104M.BIN and FW03FF01V10753M_20130621.BIN, it doesn’t matter if u have USB sticks from another manufacture then corsair as long as it is the Phison 2303 (2251-03) Controller your good to go! Also if you want to recover the USB Stick back to stock u can use my other guide http://www.pentestingshop.com/recover-a-usb-stick/ And thanks for the comment. Good Luck using your ducky h Reply

U SomeOne

Permalink

P June 8, 2015 at 3:45 pm

K

S

Thank you for the fast response … finally my “RubberDucky” worked But now i have the next Problem I made only a TestScript.txt (inject.bin) to see if it works… and it did, after i made the “Real Script”… now i have only Problems… it’s not possible for me to inject the new Script (inject.bin) … so i read your Manual how to reset the USB-Stick -> http://www.pentestingshop.com/recover-a-usb-stick/ I guess i have to do that everytime when i want “upload” a new script “inject.bin” to the USB-Stick … But i was too lazy to open the USB-Stick-Case … so i plugged the Stick in … wait until the Script has finished … the i set the Stick with CMD in BootMode (C:\fw\Psychson-master\tools\DriveCom.exe /drive=F /action=SetBootMode) Then i started up “MPALL_F1_9000_v371_0A.exe”… then i clicked on Update, and it showed my Stick.. after that i created the settings exactly like you showed in your Manual … https://www.pentestingshop.com/pentesting/make-your-own-usb-rubber-ducky-using-a-normal-usb-stick/

84/111

9/3/2016


(burner from C:\fw\fw_bn\BN03V104M.BIN) (firmware from C:\fw\fw_bn\FW03FF01V10753M_20130621.BIN) after that… i clicked on Start in “MPALL_F1_9000_v371_0A” the LED of the Stick started Flashing all the time… after a while… it stopped blinking and the LED was ON all the Time, but the MPALL_F1_9000_v371_0A stopped working… nothing happend … I waited about one Hour… but nothing goes on…. So i plugged out the Stick, made a restart… then i read a lot of Comments and so on… OK.. i had to open the USB-Stick Case It’s a Toshiba TransMemory-MX 32GB… like on this Picture ( https://cloud.githubusercontent.com/assets/9211112/4736506/0379b7bc59ed-11e4-8bf6-c38cdf7b0d54.jpg ) So i connected the two Pins together and put it in the USB-Drive… nothing happens.. no DriveLetter … no USB-Device… nothing… When i update in MPALL_F1_9000_v371_0A… nothing happens … no USBDrive… nothing… When i set it to BootMode over CMD … it workes… i can see the Stick in “MPALL” (but it tells me it only has 16GB, but it has 32), but when i try to Reset the Drive… it has Errors all the time … now… my Stick won’t start the Ducky-Script… AND i can’t use it anymore … Does anyone has an Idea what i can/try now …. (Throwing the Stick away is not what i wanna hear h Reply

U pentestshop

pm

P June 8, 2015 at 6:30

K Permalink

S

i am glad to hear that flashing a ducky script worked out for you, and indeed for flashing another script u always need to reflash it back to original first. But about the problem u have with reflashing it back to stock seems strange! The only thing i think that can be the problem is https://www.pentestingshop.com/pentesting/make-your-own-usb-rubber-ducky-using-a-normal-usb-stick/

85/111

9/3/2016


that u have not the Phison chip but a Toshiba chip, isn’t there another chip on it on the other side?.. And did you keep shortening the pins while plugging in the USB Stick? h Reply

U google advertising tools

P August 1, 2015 at 2:25 pm

K Permalink

S

Does your blog have a contact page? I’m having a tough time locating it but, I’d like to shoot you an e-mail. I’ve got some creative ideas for your blog you might be interested in hearing. Either way, great site and I look forward to seeing it expand over time. h Reply

U pentestshop

P August 11, 2015 at 8:50 pm

K Permalink

S

indeed i don’t have a contact page but you can always email me on [email protected] and ideas are always welcome..Thanks in advance h Reply

U C7330

P August 7, 2015 at 11:52 pm

K Permalink

S

Thank you for both the flash and restore guides…After a little bit of tinkering I got it to work …However, for some reason that I haven’t yet been able to figure out, my script only appears when inserted into a 2.0 usb port … I’m just wondering if this is a common issue or a problem with my firmware that I flashed?..The usb is a SanDisk Ultra 3.0 32gb with the proper Phison chip… I’m still playing around with it but any guidance is both welcomed and appreciated… Thanks again. h Reply


86/111

9/3/2016


U google plus account for business

Permalink

P August 8, 2015 at 11:27 am

K

S

Hi there, I believe your web site might be having browser compatibility problems. When I look at your website in Safari, it looks fine however when opening in I.E., it has some overlapping issues. I simply wanted to give you a quick heads up! Besides that, great site! h Reply

U pentestshop

P August 11, 2015 at 8:51 pm

K Permalink

S

thanks for the information i will definitely look into that! h Reply

U Deanne

P August 23, 2015 at 4:58 pm

K Permalink

S

Nice response in return of this question with genuine arguments and explaining everything about that. h Reply

U boy

P September 1, 2015 at 3:07 am

K Permalink

S

very cool, awesome h Reply

U Good BOy

P September 6, 2015 at 12:21 am

K Permalink


S

87/111

9/3/2016


Volume: E: Controller: Alcor AU6989SN-GT/AU6998SN-GT Possible Memory Chip(s): SanDisk SDTNQCAMA-016Gx2 SanDisk SDTNQCAMA-016G *2 Memory Type: TLC Flash ID: 454CA892 7657 Flash CE: 2 Flash Channels: Single Chip Code: 0xE512 Chip F/W: D82B Group: 98 VID: 8564 PID: 1000 Manufacturer: JetFlash Product: Mass Storage Device Query Vendor ID: JetFlash Query Product ID: Transcend 32GB Query Product Revision: 8.07 Physical Disk Capacity: 31299993600 Bytes Windows Disk Capacity: 31299989504 Bytes Internal Tags: AZWR-S872 File System: NTFS USB Version: 2.00 Declared Power: 200 mA ContMeas ID: AFA3-04-00 Microsoft Windows 7 SP1 x64 Build 7601 ———————————— http://www.antspec.com/usbflashinfo/ Program Version: 8.4.0.584 can I use it? h Reply

U pentestshop

Permalink

P Septem September ber 15, 2015 2015 at at 6:12 6:12 pm

K

S

no u can not use that USB Stick only the Phison 2303 (2251-03) Controller h Reply https://www.pentestingshop.com/pentesting/make-your-own-usb-rubber-ducky-using-a-normal-usb-stick/

88/111

9/3/2016


U He Help lpin ing g bo boy y

P Septem September ber 6, 2015 2015 at 1:14 am

K Permalink

S

Microsoft Windows [Version 6.3.9600] (c) 2013 Microsoft Corporation. All rights reserved. C:\Windows\system32>java -jar c:\fw\ducky\duckencode.jar -i c:\fw\ducky\HelloWor ld.txt -o c:\fw\ducky\inject.bin Error on Line: 1 C:\Windows\system32>java -jar c:\fw\ducky\duckencode.jar -i c:\fw\ducky\HelloWor ld.txt -o c:\fw\ducky\inject.bin Error with input file! Exception in thread “main” java.lang.reflect.InvocationTargetException at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorI sun.reflect.NativeMethodAccessorImpl.invoke(Unknown mpl.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorI sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown mpl.invoke(Unknown Source) at java.lang.reflect.Method.invoke(Unknown Source) at org.eclipse.jdt.internal.jarinja org.eclipse.jdt.internal.jarinjarloader.JarRsrcLoader.m rloader.JarRsrcLoader.main(JarRsrcLoa ain(JarRsrcLoa der.java:58) Caused by: java.lang.NullPointerException at Encoder.main(Enc Encoder.main(Encoder.java:111) oder.java:111) … 5 more C:\Windows\system32> How can I solve this problem ?? And I use Volume: E: Controller: SanDisk Possible Memory Chip(s): Not available VID: 0781 PID: 5576 Manufacturer: SanDisk Product: Firebird USB Flash Drive Query Vendor ID: SanDisk Query Product ID: Cruzer Facet Query Product Revision: 1.26 Physical Disk Capacity: 8004304896 Bytes Windows Disk Capacity: 8004300800 Bytes Internal Tags: 3Z4F-8CH3 3Z4F-8CH3 https://www.pentestingshop.com/pentesting/make-your-own-usb-rubber-ducky-using-a-normal-usb-stick/

89/111

9/3/2016


File System: NTFS USB Version: 2.00 Declared Power: 200 mA ContMeas ID: 9509-01-00 Microsoft Windows 8.1 x64 Build 9600 ———————————— http://www.antspec.com/usbflashinfo/ Program Version: 8.4.0.584 (+ I checked your shop but , that is stock now ) h Reply

U pentestshop

Permalink

P Septem September ber 15, 2015 2015 at at 6:26 6:26 pm

K

S

Did you run Command Prompt as a Administrator? And did you download the right java version? Also check this line java -jar c:\fw\ducky\duckencode.jar -i c:\fw\ducky\HelloWor ld.txt -o c:\fw\ducky\inject.bin (That u have the right filename, so that the file c:\fw\ducky\HelloWorld.txt is really HelloWorld with a capitalized H and W.) h Reply

U Sof Sofia

P Septem September ber 26, 2015 2015 at at 5:02 am

K Permalink

S

I can use: Volume: F: Controller: Phison 2251-60 Possible Memory Chip(s): Toshiba TC58NVG5T7FLA19 TC58NVG5T7FLA19 Memory Type: TLC Flash ID: 98D79882 7655 Chip F/W: 02.0A.53 Firmware Date: 2010-12-09 MP Ver.: MPALL v3.13.0B VID: 0930 PID: 6545 https://www.pentestingshop.com/pentesting/make-your-own-usb-rubber-ducky-using-a-normal-usb-stick/

90/111

9/3/2016


Manufacturer: Kingston Product: DT 101 G2 Query Vendor ID: Kingston Query Product ID: DT 101 G2 Query Product Revision: PMAP Physical Disk Capacity: 3926949888 Bytes Windows Disk Capacity: 2058338304 Bytes Internal Tags: 2Q6P-S74Q File System: FAT32 Relative Offset: 16 KB USB Version: 2.00 Declared Power: 200 mA ContMeas ID: 0629-05-00 Microsoft Windows 7 Build 7600 ———————————— http://www.antspec.com/usbflashinfo/ Program Version: 8.4.0.585 h Reply

U Rex

P October 21, 2015 at 5:25 pm

K Permalink

S

Will the Twin Duck firmware work on bad usb for using it as a memory as well as a keystroke injection tool for like this payload https://forums.hak5.org/index.php?/topic/29002-payload-wi-fi-password-stealer-saving-tosd/ h Reply

U pentestshop

Permalink

P November 4, 2015 at 8:43 pm

K

S

Dont know,i guess i have to try it out h Reply


91/111

9/3/2016


U Omar

P November 21, 2015 at 10:08 pm

K Permalink

S

Build.bat “sdcc” is not recognized as an internal or external command, operable program or batch file” These problems turns out why? My files here C:\fw\Psychson-master\firmware C:\Program Files\SDCC h Reply

U pentestshop

Permalink

P November 22, 2015 at 10:42 am

K

S

Make sure all the files are in the exact same place as in my tutorial, and also check if this is checked at the end of the installation of SDCC

also if you already did run build.bat and there is a Bin directory in the folder u should remove the Bin folder and run it again..And try to run build.bat as an Administrator, so right click on the file and select Run as Administrator. Do this for all the command prompts u open..Hope u can get this solved h Reply https://www.pentestingshop.com/pentesting/make-your-own-usb-rubber-ducky-using-a-normal-usb-stick/

92/111

9/3/2016


U João

P July 28, 2016 at 11:13 am

K Permalink

S

I have the same problem and I can’t resolve it. Pls help me h Reply

U Omar

P November 24, 2015 at 9:14 am

K Permalink

S

*** Building main.c… ‘C:\Program’ is not recognized as an internal or external command, operable program or batch file. at 1: warning 190: ISO C forbids an empty source file *** There were errors! *** *** Done. Why Noooo :/ I did what you say but I can not h Reply

U arslan

P December 31, 2015 at 9:04 am

K Permalink

S

Very Good Tutorial, I have aa Problum, i have make my usb as per show you in tutorial . And i Dn’t face any problum or any error during making rubber USB. but after complete when i unplugged and plug again its can not show any thing. or not showing in my PC. h Reply

U pentestshop

P December 31, 2015 at 10:47 am


K Permalink

S

93/111

9/3/2016


Did you use a Corsair stick like i did? And if so first try to recover the USB Stick back to normal like shown here Recover USB Stick and then start back from this step Compiling Done and check if u made the HelloWorld.txt correct using the duckencoder h Reply

U arslan

P December 31, 2015 at 7:58 pm

Permalink

K

S

Yes i have same USB that you have. but just color difference you have black USB and i have White USB. And i have perform every singel step like you perform. Now m trying to recover but its nothing showing in this software , I have connect my USB with Port but in Recovery software nothing shows my USB. But in Recovery artical you mention there “Short Pin” . I do not know how to Shortpin. And which pins i should short? h Reply

U pentestshop

pm

P January 1, 2016 at 7:10

K Permalink

S

You indeed need to short the pins like shown on the picture

it is the second and third pin from the corner like shown on the picture..You best let the recover software open and keep the pins shorted for a wile while plugging it in..U should then see the usb stick appearing in the software..Hope this helps u h Reply


94/111

9/3/2016


U arslan

11:25 pm

P January 1, 2016 at K Permalink

S

During the shot pin i have break this pin. and that time its shows in software, and m trying to format but its stop and now after breaking pin its show error “Driver : D: Mode 255 ID Error 0001”

U pentestshop

P January 1,

2016 at 11:28 pm

K Permalink

S

What do you mean with u have broke the pin? On the USB stick ? And i never had that error before..The format could take some time, but normally afterwards when u replug the USB Stick it should be back normal.

U arslan

2:05 am

P January 3, 2016 at K Permalink

S

Yes, i have break pin no 2. when i trying shorting pins by mistake. and when i applying format it takes too much time and i unplugged. after re plug its shows error like that “Driver : D: Mode 255 ID Error 0001”

U arslan

P January 1, 2016 at 2:58 am

K Permalink


S

95/111

9/3/2016


And when i open software for Recovery its does not showing any thing. But when i click on Update its generate QC.ini file which write below, [PenDriveMP] IC Type=PS2251-03 [Parameter Mark] Parameter Type=F1_MP_21 [Customize Info] USB VID=0x13FE USB PID=0x5200 String Product Name=USB DISK 3.0 String Manufacturer Name=Toshiba Inquiry Version=PMAP [Configuration] Reset Serial Number=0 Partition Boundary MB=999999999 [TestItemOption] Do Preformat Test=1 [Extra] Mode=3 [Misc] Privacy Volume Label=USB DISK Wafer Erase All=1 set1667=0x00 [Advance] FC1=0xFF FC2=0x01 CheckUSBConnectorType=0x22 [Firmware] ISP=1 Burner File=BN03V104M.BIN Firmware Name=FW03FF01V10053M.BIN h Reply

U pentestshop

P January 1, 2016 at 7:12 pm

K Permalink

S

This is normal,just do what i just told u..Shorten then pins while pluggin it in..It is not that easy to do, but after a couple off tries it should go. h Reply https://www.pentestingshop.com/pentesting/make-your-own-usb-rubber-ducky-using-a-normal-usb-stick/

96/111

9/3/2016


U arslan


K Permalink

S

K Permalink

S

you can here my error here is mmy usb that i had broke a pin h Reply

U arslan



97/111

9/3/2016



98/111

9/3/2016


h Reply

U pentestshop


K Permalink

S

from what i see here on the picture it is not the same chip as i have, u told me u had the same stick as mine only in white..But if i look close at your picture is see that on your chip it says TOSHIBA .. That’s why u cant recover the stick with my software..U will need the recover software for your stick..I can maybe help if you give me all the things that are written on the Toshiba chip.. h Reply

U Arslan


K Permalink

S

Yes dear yesterday i had buy new one usb suchas i buy before. I have uploaded pic. Now i follow your manual tutorial download all software and i create as create you. No error face during installation its same like your tutorial. But when i unplugged and replug its nothing shows. And after that i checked my system driver its shows yellow mark and not installed when m trying to install its shows me error.


99/111

9/3/2016


This is my USB

And thats Driver error, You can see below


100/111

9/3/2016


And when m trying to upload/ or reinstall its gives me error. see below

h Reply


101/111

9/3/2016


U pentestshop


K Permalink

S

Try this please … To restore your Toshiba USB Stick to a flash disk you can do the following steps: 1. Bring it Into Boot Mode 2. Download and extract: MPALL_v3.63_0D 3. Create QC.ini with following content: [PenDriveMP] IC Type=PS2251-03 [Parameter Mark] Parameter Type=F1_MP_21 [Customize Info] USB VID=0x13FE USB PID=0x5200 String Product Name=USB DISK 3.0 String Manufacturer Name=Toshiba Inquiry Version=PMAP [Configuration] Reset Serial Number=0 Partition Boundary MB=999999999 [TestItemOption] Do Preformat Test=1 [Extra] Mode=3 [Misc] Privacy Volume Label=USB DISK Wafer Erase All=1 set1667=0x00 [Advance] FC1=0xFF FC2=0x01 CheckUSBConnectorType=0x22 [Firmware] ISP=1 Burner File=BN03V101.BIN Firmware Name=FW03FF01V10053M.BIN 4. Start: MPALL_F2_v363_0D.exe -> Click on Start 5. Unplug the stick after finishing 6. Mode 3 will use the complete storage (Windows will see only a few MB Storage on the first partition of the stick. I used cfdisk from ubuntu to erase the first partition and https://www.pentestingshop.com/pentesting/make-your-own-usb-rubber-ducky-using-a-normal-usb-stick/

102/111

9/3/2016


create one big partition. You can also use the Windows Tool: Restore-v3.13.0.0.rar to restore the storage. After that you can format it with windows.) 7. Now you have a brand new Flash Stick with 14,44 GB Memory free


103/111

9/3/2016


h Reply

U Arslan


K Permalink

S

YES dear i have checked it. But it can not give me permission for modifation. When i pluggin its give me error that i have mention already. I think its have no solution because it’s pin break. But i have Buy another USB but it’s also still not work. I have windows 10 and i checked 2 laptops both are giving me same error. Driver not installed. Your USB work on Windows 10? h Reply


104/111

9/3/2016


U pentestshop


K Permalink

S

Yes my Usb stick works under Windows 10, but it’s also another stick then the one u use!..I tried looking for the fault u got but cant same to find the right solution..I would like to help to get your usb stick working again, but since i don’t own that kind off usb stick that u use i cant try it for myself..But maybe you can find the right solution here LINK h Reply

U mario


K Permalink

S

hola mi pregunta es donde se guardaran todas la informacion que se puedan conseguir h Reply

U pentestshop


K Permalink

S

no puedes guardarlo en una memoria USB , pero u puede guardarlo a distancia .. Lo siento por la mala traducción h Reply

U Arslan


K Permalink

S

Which USB that work under windows 10, But afterall My Payload hello world works on windows7 perfectly. And now I am able to remove payload and get back orignal USB. Thank Dear of all things. 1 thing i wana ask you, can we put exe with payload , for example if we put usb then exe will run.? h Reply https://www.pentestingshop.com/pentesting/make-your-own-usb-rubber-ducky-using-a-normal-usb-stick/

105/111

9/3/2016


U pentestshop


K Permalink

S

This USB Stick works for sure under Windows 10 And i am glad u finally got it all working. The question about if you can put a exe payload on to the USB Stick is NO. But it’s much better to put a powershell exploit onto the BadUSB You can then make a powershell script to download your exe from somewhere. But most virus scanners or anti-malware software will block that, unless you first set a script to disable it all look here for the powershell script LINK h Reply

U Arslan


K Permalink

S

Thank You, But i am not understand how to do that, There on 3 Different scripts i do not know which is better one. I do not know how to use it, i have seen many videos about using Powershell script, But They shows some different methods, If You have a time can you please make video about Powershell Script, Or How to Use Powershell Script in Rubber Ducky. Thanks h Reply https://www.pentestingshop.com/pentesting/make-your-own-usb-rubber-ducky-using-a-normal-usb-stick/

106/111

9/3/2016


U pentestshop


K Permalink

S

No problem, and i will sure keep it in mind to make a video some day. But i am very busy now working on the launch off the new OsmocomBB guides. And planning on selling those phones h Reply

U blackornish

P March 30, 2016 at 3:57 pm

K Permalink

S

hello, i want to buy this one. How can I buy this USB? Please send an email to me. [email protected] h Reply

U pentestshop

P March 30, 2016 at 4:01 pm

K Permalink

S

Sorry,the usb stick is currently not available,im looking for some new supported sticks since u cant buy the corsair anymore. h Reply

U Datalife

P April 21, 2016 at 3:45 pm

K Permalink

S

hi guys , i have a some questions , but , every time I want to send the payload in the ducky usb , I must to recover a usb stick?????????


107/111

9/3/2016


h Reply

U Datalife

P April 21, 2016 at 3:52 pm

K Permalink

S

hi guys , i have a some questions , but , every time I want to send the payload in the ducky usb , I must to recover a usb stick? h Reply

U pentestshop

P April 21, 2016 at 6:47 pm

K Permalink

S

Yes u indeed always need to flash it back to stock,with a real usb rubber ducky u have a micro sd card slot where you can put your payloads on to change them..But since this is a normal USB Stick u need to do it manualy. h Reply

U dak47

P May 2, 2016 at 6:18 am

K Permalink

S

Under “C: \ fw \ Psychson-master \ tools” I created “DriveCom.exe”, “EmbedPayload.exe” and “Injector.exe”. I created also “C: \ fw \ Psyschson-master \ firmware \ bin \ bn.bin” Next, I secured the firmware from a USB stick and injected in this my “Hello World inject.bin” After that I wanted to copy the infected firmware back on the stick, but I get an error every time after I added the stick in the boot mode, so that it is not possible for me to use the custom firmware. Terminal says: C:\Windows\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=F /action=SetBootMode Action specified: SetBootMode


108/111

9/3/2016


C:\Windows\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=F /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN Action specified: SendExecutable FATAL: System.InvalidOperationException: Header not accepted bei DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) in c:\fw\Psychsonmaster\DriveCom\DriveCom\PhisonDevice.cs:Zeile 256. bei DriveCom.PhisonDevice.TransferFile(Byte[] data) in c:\fw\Psychsonmaster\DriveCom\DriveCom\PhisonDevice.cs:Zeile 238. bei DriveCom.Startup._ExecuteImage(String fileName) in c:\fw\Psychsonmaster\DriveCom\DriveCom\Startup.cs:Zeile 403. bei DriveCom.Startup.Main(String[] args) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:Zeile 109. C:\Windows\system32> ……so

help would be nice!

h Reply

U pentestshop

P June 18, 2016 at 5:25 pm

K Permalink

S

Try unplugging and entering boot mode again. It is possible to enter boot mode by shorting the pins yet disrupting future communication with the NAND chip, and it looks like that may be what happened here. h Reply

U dpfamily

Permalink

P June 19, 2016 at 9:10 am

K

S

I have the exact Same problem I foolowed the instructions and i was able to copy paste and execute the first 3 command lines but i got the same errors as “dak47” when i am tried “c:\fw\Psychson-master\tools\DriveCom.exe /drive=E /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN” i get the same errors as “dak47” I havent tried to shorten the pins. Anyother solution? thank you so much for this great guide you have done a great job. h Reply https://www.pentestingshop.com/pentesting/make-your-own-usb-rubber-ducky-using-a-normal-usb-stick/

109/111

9/3/2016


U dpfamily

P June 19, 2016 at 9:12 am

K Permalink

S

any lack with your problem? i have the same problem! h Reply

U sfsfdf

P August 5, 2016 at 2:39 pm

K Permalink

S

mee too h Reply

U user_1306

P July 26, 2016 at 11:32 am

K Permalink

S

we cannot just change the hello.txt file to change the script ? h Reply

U nameless

P August 23, 2016 at 7:08 am

K Permalink

S

Hey just wondering if these usb’s will work Phison 2251-61 Phison 2251-67 h Reply

U pentestshop

P August 23, 2016 at 6:59 pm

K Permalink

S

No, it only works with a Phison 2251-03 nand chipset https://www.pentestingshop.com/pentesting/make-your-own-usb-rubber-ducky-using-a-normal-usb-stick/

110/111

Make your own USB Rubber Ducky using a normal USB stick _.pdf

Recommend Documents