Make Your Own USB Rubber Ducky Using A Normal USB Stick - PDF

9/3/2016
Make your own USB Rubber Ducky using a normal USB stick |
Z MyBasket:0.00
0items
Mainnavigation
MakeyourownUSBRubberDuckyusinga
normalUSBstick
DidyoueverwantedtomakeyourownUSBRubberDucky?
WellnowyoucanusingaregularUSBstick,imuststartwithmentioningthatitcannotbedonewithall
theUSBsticksyouwillneedonewithaspecificNandchipsetonit.
MorespecificthePhison225103(2303)
Sonowyouareprobablywonderingwheredoigetthatspecificusbstickthen,andhowdoiknowwhat
chipsetisonit?
Ongithubthereisalistwithallknowcompatibledevices,butmostoffthemarenotforsaleanymore.
https://www.pentestingshop.com/pentesting/make-your-own-usb-rubber-ducky-using-a-normal-usb-stick/
1/111
9/3/2016
Sowhatdoidothen?
Wellyoucanbuyoneinmywebshop
CorsairVoyagerLS16GB
24.99
Readmore
Sothisiswhatuneedtogetstarted,andyouwillalsoneedthefollowingthings:
FILEONE:
TheZipfilefromgithubfoundhere:LINK
2/111
9/3/2016
FILETWO:
VisualStudio2012Expresswhichcanbedownloadedhere:LINK
3/111
9/3/2016
FileTHREE:
SDCC(SmallDeviceCCompiler)whichcanbedownloadedhere:LINK
4/111
9/3/2016
FILEFOUR:
JavaRuntimeEnvironment7whichcanbedownloadedhere:LINK
5/111
9/3/2016
FILEFIVE:
Duckencoder.jarwhichcanbedownloadedhere:LINK
FILESIX:
6/111
9/3/2016
TheBurnerimageandfirmwareforflashingtheUSBstick
Whichcanbedownloadhere:LINK
==============================================
Nowthatudownloadedallthesefilesuarereadytoinstallthem!
Followalongwithmeforhowtoinstallallthisproperly
Soweonlyneedtoinstall3things(causeotherarejustzippackagesyouwillneed).
LetsbeginwithMicrosoftVisualStudioExpress2012
StepOne:
GotothelocationwhereudownloadedtheVisualStudioExpress2012setup
MineisinDownloads
sodoubleclickthisiconwhereusavedit
nowfollowalongwiththeprocedureshownbelow.
7/111
9/3/2016
NowmakesureuchecktheboxIagreetotheLicensetermsandconditions
andclickINSTALL
ushouldthenseethefollowingthingspassby
8/111
9/3/2016
9/111
9/3/2016
10/111
9/3/2016
11/111
9/3/2016
12/111
9/3/2016
andwhenitsdoneushouldseethis
13/111
9/3/2016
unowneedtopresstheLAUNCHbuttontostartVisualStudioExpress
FromthemomentupressedLAUNCHushouldseethis
14/111
9/3/2016
ClickontheRegisterOnline(Dontworryuwillnotneedtopayanythingcausethisisafreeversion,but
youmustsigninusingaexistingemailaddressuhaveatMicrosoft)
likeshownhere
15/111
9/3/2016
SofillintheemailaddressandpasswordyouhaveatMicrosoft(akahotmail.com,outlook.com,..etc)
andclickSignIn
nextushouldseethis
16/111
9/3/2016
nowwhenuseethistheemailaddressyousignedinwithshouldbeautomaticallybefilledin,iblanked
outmine(forspamreason)butintheDropdownmenuwhereitsaskingAreyouregisteringVisualStudio
forAcademic,BusinessorPersonaluse?ushouldchoosePersonal
AndwhereitsaskingAreyoucreatingsoftwareforpublicdistribution,onlineusebyothersorprivate
use?ushouldchoosePrivateUse
OnceudidallthisClickonContinue
Ushouldnowgetthis
17/111
9/3/2016
YourProductKeyforactivatingtheVisualStudioExpress2012
SocopytheProductKeyandgobacktothepopupustartedwith
18/111
9/3/2016
AndpastetheProductKeyinthefieldandClickNext
whenudidthisandeverythingisfineushouldgetthis
19/111
9/3/2016
soclickClose
andnextuwillendupinVisualStudioExpress2012
20/111
9/3/2016
sincewedontneeditrightawayucanclosetheprogramfornow.
StepTwo:
NextwearegoingtoinstallSDCC(SmallDeviceCCompiler)
sodoubleclickthisiconwhereudownloadittomineisagainalsounderDownloads
nowfollowalongwiththepicturesbelow
21/111
9/3/2016
22/111
9/3/2016
NowthenextstepisVeryImportant!
UshouldmakesureuareinstallingittoC:\ProgramFiles\SDCC
23/111
9/3/2016
afteruclickedInstallushouldseeitinstallinglikeshownherebelow
Andfollowedbythis
24/111
9/3/2016
SonowclickNext
AndclickFinish
UarenowdonewithinstallingSDCC(SmallDeviceCCompiler)
25/111
9/3/2016
StepThree:
WearenowgoingtoinstallJavaRuntimeEnvironment8
wellbeneedingthistorunDuckencoder.jar
Nowagaingotothelocationwhereusavedtheinstalleranddoubleclickthisicon
andfollowalongwiththepicturesbelow
whenuseethisclickInstall
26/111
9/3/2016
andyesitstrue3BillionDevicesRunJavamaybeevenyourmicrowave
whenthesetupprocessiscompleteushouldgetthis
SonowthatitsdoneclickClose
27/111
9/3/2016
Settingthingsup:
UnpackingthePsychsonmaster.zipudownloadedfromgithub(soFILEONE)
Sobrowsetothelocationwhereudownloadeditto,mineagainisinDownloads
AndnowwhereuseethisiconrightclickonitandselectExtractHerelikeshownherebelow
NowthatudidthisushouldgettheFolderPsychsonmasterinthelocationwhereustartedfromsoin
mycaseC:\Users\Pentestlab\Downloads>
28/111
9/3/2016
Nowthatuhavethisfolderweshouldcopyittoanotherlocation.
Ihighlysuggestyoudoexactlythesameasidosothatafterwardsucan
downloadmyhelpfilewiththecommandsinit.
SonowrightclickonthefolderPsychsonmasterandselectcopylikeshownhere
29/111
9/3/2016
NowthatucopiedthefileOpenMyComputerandgotoyourC:\
Andcreateanewfoldercalledfw(allinlowercase)
likeshownbelow:
30/111
9/3/2016
NowopenthatfolderfwthatujustcreatedandpastethePsychsonmasterfolderinside!
31/111
9/3/2016
ushouldthenhavethefolderPsychsonmasterinsidethefolderc:\fw\
likeshownhere
SonowthatupastedthefolderPsychsonmasterherewheregoingtoplacealltheotherfileswe
needhereunderc:\fw
sinceyouarenowinthefolderc:\fwrightclickhereandcreateanewfoldercalledfw_bn
likeshownhere
32/111
9/3/2016
nowcreateanotherfoldercalledduckylikeshownhere
33/111
9/3/2016
nowontopudownloadedfilesixanditisnamedfirmware_ps225103.rar
itshouldbeinyourDownloadsfolderatthistime,butweneedtoplaceitinthefw_bnfolderand
extractitthere
socopythefirmware_ps225103.rarfilefromyourDownloadsfolderlikeshownbelow
andpasteitunderc:\fw\fw_bn
likeshownhere
34/111
9/3/2016
Andnowthatupastedthefilefirmware_ps225103.rarhereunderc:\fw\fw_bnushouldextractithere
likeshownhere
35/111
9/3/2016
ushouldthenhavethis
36/111
9/3/2016
Butnowweneedtogetsomefilesoutoffthisfolderandcopyittothislocationc:\fw\fw_bn
SoopenthefolderFirmwarePS225103likeshownherebelowandcopythefilesBN03V104M.BIN
andFW03FF01V10753M_20130621.BIN
likeshownhere
Sonowthatucopiedthesefilesgobackonefoldersotothefolderc:\fw\fw_bnandpastethese2files
here
solikethis
37/111
9/3/2016
ushouldthenhavethis
38/111
9/3/2016
ThefilesBN03V104M.BINandFW03FF01V10753M_20130621.BINunderc:\fw\fw_bn
Nowthatthisisdoneushouldmoveontothenextstep
Thenextstepiscopyingthefileduckencoder.jartoc:\fw\ducky
Sogotothelocationwhereusavedduckencoder.jarmyisstillunderDownloadssoineedtocopyit
likeshownhere
nowthatucopiedthisfileweshouldmoveittoc:\fw\ducky
sogotothelocationc:\fw\duckyandpastethefileduckencoder.jarhere
likeshownhere
39/111
9/3/2016
ushouldthenhavethis
40/111
9/3/2016
thefileduckencoder.jarinthefolderc:\fw\ducky
soyoushouldnowhavethefoldersducky,fw_bnandPsychsonmasterinc:\fw
likeshownhere
Solistedoutforuoncemore
duckencoder.jar(filefiveontop)underc:\fw\ducky
BN03V104M.BINandFW03FF01V10753M_20130621.BIN(filesixontop)underc:\fw\fw_bn
andtheextractedgithubzipfile(fileoneontop)underc:\fw(thefolderinthezipfilefromgithubis
alreadycalledPsychsonmaster)somakesureudonthavethisfoldersdouble!
Nowwearereadywithputtingallthefilesinplace!
COMPILINGALLTHETHINGS
Sothenextstepistocompileallthestuff
41/111
9/3/2016
Sogotoc:\fw\Psychsonmaster\DriveCom
andopenthefileDriveCom.sln
likeshownhere
SoyoushouldjustdoubleclickonDriveCom.sln
andgetthis
42/111
9/3/2016
nowthatuseethisushouldclickinthetopbaronStart
likeshownhere
Onceuclickedonstartushouldseethis
43/111
9/3/2016
NowthatuseethisushouldClosethewindowwhereitsaysNoactionspecified,enteringconsole
First
likeshownhere
afteruclosedthecommandpromptwindowushouldclosetheVisualStudio
likeshownhere
44/111
9/3/2016
Nowgotoc:\fw\Psychsonmaster\Injector
likeseenhere
AnddoubleclickonInjector.slntoopenitinVisualStudioExpress
45/111
9/3/2016
ushouldthenseethis
againnowthatuseethisushouldclickinthetopbaronStart
likeshownhere
nowonceyouclickedstartushouldgetthis
46/111
9/3/2016
youshouldseesometextinOutput
sonextcloseVisualStudioagain
likeshownhere
Soonceyouclickedtheclosebuttonweshouldnowgotofollowinglocation
c:\fw\Psychsonmaster\EmbedPayload
47/111
9/3/2016
andopenthefileEmbedPayload.sln
likeshownhere
Nowonceyoudoubleclickedthisfileushouldseethis
48/111
9/3/2016
nowthatuseethisushouldclickinthetopbaronStart
likeshownhere
Onceyoudidclickinstartyoushouldagainseesomeoutputtextbelow
likeseenhere
nowthatthisisdonecloseVisualStudioagainlikeshownhere
49/111
9/3/2016
Nowallthecompilingisdonesoletsgetonemorethingweneedtomakeitcomplete
thethingweneedisascriptforputtingontheselfmadeUSBrubberducky
wewillbegettingtheHelloworldscriptfromthegithub
sogototothiswebsite:LINK
youwillthenseethis
50/111
9/3/2016
SoasyouseeinthepictureunowneedtoclickonthelinktoPayloadHelloWorld
uwillthencometothispage
51/111
9/3/2016
soasyouseeinthepictureweneedtoselectallthetextmarkedinblueandthenrightclickand
chooseCopy
Nowthatucopiedthistextweneedtogotothefollowinglocation
c:\fw\ducky
andcreateanewtextfile
likeshownhere
AndnamethefileHelloWorld.txt
likeshownhere
52/111
9/3/2016
nowthatucreatedthetextfileHelloWorld.txtunderc:\fw\ducky
openitbydoubleclickingonit
andthenweneedtopastethecodewecopiedfromthegithubpageinsidetheHelloWorld.txt
sointheemptydocumentrightclickandchoosePaste
andyoushouldthenhavethis
53/111
9/3/2016
Nowthatthecodeisinsideweneedtosaveit
54/111
9/3/2016
andcloseitlikeseenherebelow
Sonowthatthisisdonewecanstartplayingwiththestick
FirstwearegoingtocheckifthestickreallyhasthePhison225103(2303)chipset
wecancheckthisbydownloadingthesoftwarecalledGetFlashInfo
getitfromthisLINK
whendownloadedgotothelocationusavedittomineisstandardinDownloads
ushouldthereseethezipfileudownloaded
nowrightclickonthisandchooseExtracthere
55/111
9/3/2016
likeshownhere
ushouldthenopenthefoldernamedusbflashinfo
sodoubleclickonthisfolderandyoushouldthenseethesefiles
56/111
9/3/2016
SonowInsertyourUSBstickanddoubleclickonGetFlashInfo.exe
ushouldthenseethis
ushouldgetthisbackasresponse
57/111
9/3/2016
ItsveryimportantthatugetPhison2303(225103)asController
NormallyifyouboughtaUSBstickfrommywebshopitshouldbefine!
Sonowthatwenowforsurethatthestickuhavehastherightnandchipsetwecanstartmakingthe
USBRubberDucky
sofirstdownloadthisfileicreatedwithallthecommandsuwillneedformakingtheUSBRubberDucky
fromthisLINK
Forconvenientworksavethefileunderc:\fw
soyoushouldnowhavethisfilelikeshownhere
58/111
9/3/2016
Sonowthatuhavemycommandsguide.txtfiledoubleclickonitandyoushouldseethis
59/111
9/3/2016
SonowleavethetextfileopenandclickonSTARTandtypecmdandthenrightclickonCommand
PromptandchooseRunasAdministrator
likeshownhere
youshouldthengetthis
SonowgobacktothetextfileudownloadedfrommyLINK(commandguide.txt)andcopythefirst
linelikeshownhere
60/111
9/3/2016
Nowthatucopiedthefirstlinegobacktothecommandpromptandrightclickandchoosepastelike
shownhere
ushouldthengetthis
61/111
9/3/2016
whenupastedthispressENTER
andyoushouldthenseethis
anewlineandnoerrorsifyouseeerroronline1youshouldcheckthefileHelloWorld.txtmaybeitsstill
empty
sonowthecommandujustranconvertedtheHelloWorld.txttoainject.binusingtheduckencode.jar
Nextweneedtomakeafirmwarefile
62/111
9/3/2016
sogotoC:\fw\Psychsonmaster\firmware
andyoushouldseethefileslikeshownhere
Sonowthatuareinthisfolderushoulddoubleclickonbuild.bat
likeshownhere
63/111
9/3/2016
ushouldseesomethinghappeninginacommandpromptandthenitautomaticallycloses,but
afterwardsyoushouldnowseeabinfolderinthislocation
likeshownhere
64/111
9/3/2016
Sonextstepwegobacktothetextfileudownloadedfrommywebsiteandwearegoingtocopythe
secondline
likeshownhere
65/111
9/3/2016
Nowthatucopiedthis
gobacktothecommandpromptandpasteitthere(ifyouclosedthecmd,besureurunitagain
asAdministrator)
likeshownhere
66/111
9/3/2016
ushouldthengetthis
NowthatupastedthesecondlineintheCommandPromptushouldpressENTER
andwhensuccessfullyyoushouldseeitprintoutFileupdated
likeshownhere
67/111
9/3/2016
NowthatthisisdonereinsertyouUSBstick
68/111
9/3/2016
NowthatthestickisyourUSBportopenMycomputerandcheckwhatdrivelettertheUSBStickhas.
likeshownhere
69/111
9/3/2016
Somakesureurememberthedriveletterthathasbeenassignedtoyour
USBStick!
SonowgobacktothetextfileugotfrommywebsiteandcopythelineunderSETUSBSTICK
INBOOTMODE
likeshownhere
70/111
9/3/2016
Likeseeninthepicturemakesurethatuchangethedriveletterto
yours!
sowhere/drive=GischangetheGtothedriveletterthathasbeen
assignedtoyourUSBStick!
NowthatucopiedthislineswitchbacktotheCommandPromptandpasteitthere
likeshownhere
71/111
9/3/2016
whenuclickedpasteushouldgetthis
WhenudidthisucanpressENTER
andushouldthengetthis
72/111
9/3/2016
AlsoifyouremovedthecasingaroundtheUSBStickuboughtfrommywebshopushouldseethatthe
blueledstayson
SonowthattheUSBStickisinBootMode
GobacktothetextfileandcopythelineunderSETACTIONTOSENDEXECUTABLE
USINGBURNERIMAGE
likeshownhere
73/111
9/3/2016
SonowthatucopiedthislineswitchbacktotheCommandPromptandpasteitthere
likeshownhere
againwhenuclickedpaste
74/111
9/3/2016
ushouldgetthis
NowthatthelineispasteducanpressENTER
andyoushouldthenseethis
Nowthatthisisdoneswitchbacktothetextfile
andcopythelineunderDUMPTHEORIGINALFIRMWARE
75/111
9/3/2016
likeshownhere
NowthatucopiedthislineswitchbacktotheCommandPromptandpasteitthere
likeshownhere
76/111
9/3/2016
Nowwhenuclickedpasteyoushouldseethis
NowwhenupastedityoucanpressENTER
andshouldseethis
77/111
9/3/2016
Nowthatthisisdoneswitchonemoretimebacktothetextfileandcopytheline
underSENDPAYLOADTOFIRMWARE
likeshownhere
78/111
9/3/2016
nowthatucopiedthislineswitchbacktotheCommandPromptandpasteitthere
likeshownhere
Nowwhenuclickedpasteyoushouldgetthis
NowthatitspasteducanpressENTER
andyoushouldseethis
79/111
9/3/2016
YounowjustflashedyourownUSBRubberDuckyusingaregularUSB
Stick
Like 4
Tweet
Follow
Share 4
66ResponsestoMakeyourownUSBRubberDuckyusinganormalUSBstick
U Michael
P April22,2015at10:32pm K Permalink S
Thanks for this tutorial. The hello world script work but how could i change the script.
h Reply
U pentestshop
P April24,2015at11:20pm K Permalink
U will need to flash the USB-stick back to stock first, you do this by using a
tool from the flash vendor.
Sadly i cant specific tell which one since i dont know on what USB-stick u did this? So what
80/111
9/3/2016
is the vendor? Corsair,Kingston,Patriot,..?

But u also need to shorten the pins first before u can do this, shortening the pins set its
back in flash mode. Its pin 2 and 3 on the Phison 2251-03 chip
h Reply
U Michael
P April25,2015at8:58pm K
Permalink S
I use the Corsair Voyager LS .
h Reply
U pentestshop
P May25,2015at12:25pm K Permalink
http://www.pentestingshop.com/recover-a-usb-stick/
h Reply
U WhiteRabbit
P May7,2015at10:41pm K Permalink S
This is great, really good work, excellent explanation, i got the Kingston Digital 8GB USB 3.0
DataTraveler (DT100G3/8GB), if i want to add a different payload, i need to flash it back to
stock and re do all process again? isnt there another way to do it? thanks!
h Reply
U pio
P May19,2015at8:43am K Permalink S
Have you tried?

Did it work?
81/111
9/3/2016
i got the Kingston Digital 8GB USB 3.0 DataTraveler (DT100G3/8GB), too
Thanks!
h Reply
U pentestshop
U need to do this
h Reply
U SingleCore
P May17,2015at8:43pm K Permalink S
Awesome, it works. But now I have the problem of flashing another script. I would like to
restore the original firmware as mentioned above but I used this ghetto USB drive which
has the correct controller. But I cant seem to find a tool to revert the software. Any input
would be appreciated.
h Reply
U pentestshop
Sorry for the late reply but i was working on this guide, its actually very
simple. So go to this link and follow this process
h Reply
U SomeOne
P June7,2015at11:13am K Permalink S
Hi, thank you for the detailed Manual, but i got still one (for me very important) question.
82/111
9/3/2016
I got several USB-Sticks with the Phison 2303 (2251-03) Controller, most of them are:
Manufacturer: TOSHIBA
Product: TransMemory Mx
Do i also have to take the two files BN03V104M.BIN and FW03FF01V10753M_20130621.BIN
or should i take other files cause i dont have the same Stick u use ???
You wrote:So open the folder Firmware PS2251-03 like shown here below and copy the files BN03V104M.BIN
and FW03FF01V10753M_20130621.BIN
Im afraid of damaging the stick. hope you can help me!!!!
Detailed Information of the Stick using FlashDriveInfoExtractor:

Volume: J:
Controller: Phison 2303 (2251-03)
Possible Memory Chip(s):
Toshiba TH58NVG8T2JTA20
Toshiba TH58TEG8T2JTA20
Toshiba TC58NVG7T2JTA00
Toshiba TC58TEG7T2JTA00
Memory Type: TLC
Flash ID: 983AA892 7657
Chip F/W: 02.08.53
Firmware Date: 2014-01-02
ID_BLK Ver.: 1.2.65.0
MP Ver.: MPALL v3.29.0C
VID: 0930
PID: 6545
Manufacturer: TOSHIBA
Product: TransMemory Mx
Query Vendor ID: TOSHIBA
Query Product ID: TransMemory Mx
Query Product Revision: PMAP
Physical Disk Capacity: 31212699648 Bytes
Windows Disk Capacity: 31191793664 Bytes
Internal Tags: 2Q6P-S74J
File System: FAT32
Relative Offset: 4032 KB
USB Version: 3.00 in 2.00 port
Declared Power: 300 mA
ContMeas ID: 76B0-02-00
Microsoft Windows 7 SP1 x64
83/111
9/3/2016
h Reply
U pentestshop
P June7,2015at12:25pm K Permalink
Yes you must use the files BN03V104M.BIN and

FW03FF01V10753M_20130621.BIN, it doesnt matter if u have USB sticks from
another manufacture then corsair as long as it is the Phison 2303 (2251-03) Controller
your good to go! Also if you want to recover the USB Stick back to stock u can use my
other guide http://www.pentestingshop.com/recover-a-usb-stick/
And thanks for the comment.
Good Luck using your ducky
h Reply
U SomeOne
P June8,2015at3:45pm K
Permalink S
Thank you for the fast response finally my RubberDucky
worked
But now i have the next Problem
I made only a TestScript.txt (inject.bin) to see if it works and it did, after i
made the Real Script
now i have only Problems
its not possible for me to inject the new Script (inject.bin) so i read your
Manual how to reset the USB-Stick ->
I guess i have to do that everytime when i want upload a new script
inject.bin to the USB-Stick
But i was too lazy to open the USB-Stick-Case so i plugged the Stick in
wait until the Script has finished the i set the Stick with CMD in BootMode
(C:\fw\Psychson-master\tools\DriveCom.exe /drive=F /action=SetBootMode)
Then i started up MPALL_F1_9000_v371_0A.exe then i clicked on Update,
and it showed my Stick..
after that i created the settings exactly like you showed in your Manual
84/111
9/3/2016
(burner from C:\fw\fw_bn\BN03V104M.BIN)

(firmware from C:\fw\fw_bn\FW03FF01V10753M_20130621.BIN)
after that i clicked on Start in MPALL_F1_9000_v371_0A
the LED of the Stick started Flashing all the time after a while it
stopped blinking and the LED was ON all the Time, but the
MPALL_F1_9000_v371_0A stopped working nothing happend
I waited about one Hour but nothing goes on.
So i plugged out the Stick, made a restart then i read a lot of Comments
and so on OK.. i had to open the USB-Stick Case
Its a Toshiba TransMemory-MX 32GB like on this Picture
(https://cloud.githubusercontent.com/assets/9211112/4736506/0379b7bc59ed-11e4-8bf6-c38cdf7b0d54.jpg)
So i connected the two Pins together and put it in the USB-Drive nothing
happens.. no DriveLetter no USB-Device nothing
When i update in MPALL_F1_9000_v371_0A nothing happens no USBDrive nothing
When i set it to BootMode over CMD it workes i can see the Stick in
MPALL (but it tells me it only has 16GB, but it has 32), but when i try to
Reset the Drive it has Errors all the time
now my Stick wont start the Ducky-Script AND i cant use it anymore
Does anyone has an Idea what i can/try now. (Throwing the Stick away is
not what i wanna hear
h Reply
U pentestshop
P June8,2015at6:30
pm K Permalink S
i am glad to hear that flashing a ducky script
worked out for you, and indeed for flashing
another script u always need to reflash it back to original first.
But about the problem u have with reflashing it back to stock
seems strange! The only thing i think that can be the problem is
85/111
9/3/2016
that u have not the Phison chip but a Toshiba chip, isnt there
another chip on it on the other side?.. And did you keep
shortening the pins while plugging in the USB Stick?
h Reply
U googleadvertisingtools
P August1,2015at2:25pm K Permalink S
Does your blog have a contact page? Im having a tough

time locating it but, Id like to shoot you an e-mail.
Ive got some creative ideas for your blog you might be interested in hearing.
Either way, great site and I look forward to seeing it expand over time.
h Reply
U pentestshop
P August11,2015at8:50pm K Permalink
indeed i dont have a contact page but you can always email me on
pentestingshop@gmail.com and ideas are always welcome..Thanks in advance
h Reply
U C7330
Thank you for both the flash and restore guidesAfter a little bit of tinkering I got it to
workHowever, for some reason that I havent yet been able to figure out, my script only
appears when inserted into a 2.0 usb portIm just wondering if this is a common issue or
a problem with my firmware that I flashed?..The usb is a SanDisk Ultra 3.0 32gb with the proper Phison
chipIm still playing around with it but any guidance is both welcomed and appreciatedThanks again.
h Reply
86/111
9/3/2016
U googleplusaccountforbusiness
P August8,2015at11:27am K
Permalink S
Hi there, I believe your web site might be having browser compatibility problems.
When I look at your website in Safari, it looks fine however when opening in I.E.,
it has some overlapping issues. I simply wanted to give you
a quick heads up! Besides that, great site!
h Reply
U pentestshop
thanks for the information i will definitely look into that!

h Reply
U Deanne
Nice response in return of this question with genuine arguments and

explaining everything about that.
h Reply
U boy
P September1,2015at3:07am K Permalink S
very cool, awesome

h Reply
U GoodBOy
87/111
9/3/2016
Volume: E:
Controller: Alcor AU6989SN-GT/AU6998SN-GT
SanDisk SDTNQCAMA-016Gx2
SanDisk SDTNQCAMA-016G *2
Memory Type: TLC
Flash ID: 454CA892 7657
Flash CE: 2
Flash Channels: Single
Chip Code: 0xE512
Chip F/W: D82B
Group: 98
VID: 8564
PID: 1000
Manufacturer: JetFlash
Product: Mass Storage Device
Query Vendor ID: JetFlash
Query Product ID: Transcend 32GB
Query Product Revision: 8.07
Internal Tags: AZWR-S872
File System: NTFS
USB Version: 2.00
ContMeas ID: AFA3-04-00
Microsoft Windows 7 SP1 x64 Build 7601
http://www.antspec.com/usbflashinfo/
Program Version: 8.4.0.584
can I use it?
h Reply
U pentestshop
P September15,2015at6:12pm K
Permalink S
no u can not use that USB Stick only the Phison 2303 (2251-03) Controller
h Reply
88/111
9/3/2016
U Helpingboy
Microsoft Windows [Version 6.3.9600]

(c) 2013 Microsoft Corporation. All rights reserved.
C:\Windows\system32>java -jar c:\fw\ducky\duckencode.jar -i c:\fw\ducky\HelloWor
ld.txt -o c:\fw\ducky\inject.bin
Error on Line: 1
C:\Windows\system32>java -jar c:\fw\ducky\duckencode.jar -i c:\fw\ducky\HelloWor
ld.txt -o c:\fw\ducky\inject.bin
Error with input file!
Exception in thread main java.lang.reflect.InvocationTargetException
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at org.eclipse.jdt.internal.jarinjarloader.JarRsrcLoader.main(JarRsrcLoa
der.java:58)
Caused by: java.lang.NullPointerException
at Encoder.main(Encoder.java:111)
5 more
C:\Windows\system32>
How can I solve this problem ??
And I use
Volume: E:
Controller: SanDisk
Possible Memory Chip(s): Not available
VID: 0781
PID: 5576
Manufacturer: SanDisk
Product: Firebird USB Flash Drive
Query Vendor ID: SanDisk
Query Product ID: Cruzer Facet
Query Product Revision: 1.26
Internal Tags: 3Z4F-8CH3
89/111
9/3/2016
File System: NTFS

USB Version: 2.00
ContMeas ID: 9509-01-00
Microsoft Windows 8.1 x64 Build 9600
(+ I checked your shop but , that is stock now )
h Reply
U pentestshop
P September15,2015at6:26pm K
Permalink S
Did you run Command Prompt as a Administrator? And did you download
the right java version?
Also check this line java -jar c:\fw\ducky\duckencode.jar -i c:\fw\ducky\HelloWor
ld.txt -o c:\fw\ducky\inject.bin (That u have the right filename, so that the file
c:\fw\ducky\HelloWorld.txt is really HelloWorld with a capitalized H and W.)
h Reply
U Sofia
I can use:
Volume: F:
Controller: Phison 2251-60
Toshiba TC58NVG5T7FLA19
Memory Type: TLC
Flash ID: 98D79882 7655
Chip F/W: 02.0A.53
Firmware Date: 2010-12-09
MP Ver.: MPALL v3.13.0B
VID: 0930
PID: 6545
90/111
9/3/2016
Manufacturer: Kingston
Product: DT 101 G2
Query Vendor ID: Kingston
Query Product ID: DT 101 G2
Query Product Revision: PMAP
Internal Tags: 2Q6P-S74Q
File System: FAT32
Relative Offset: 16 KB
USB Version: 2.00
ContMeas ID: 0629-05-00
Microsoft Windows 7 Build 7600
h Reply
U Rex
P October21,2015at5:25pm K Permalink S
Will the Twin Duck firmware work on bad usb for using it as a memory as well as a
keystroke injection tool for like this payload
https://forums.hak5.org/index.php?/topic/29002-payload-wi-fi-password-stealer-saving-tosd/
h Reply
U pentestshop
P November4,2015at8:43pm K
Permalink S
Dont know,i guess i have to try it out
h Reply
91/111
9/3/2016
U Omar
P November21,2015at10:08pm K Permalink S
Build.bat
sdcc is not recognized as an internal or external command, operable program or batch file
These problems turns out why?
My files here
C:\fw\Psychson-master\firmware
C:\Program Files\SDCC
h Reply
U pentestshop
P November22,2015at10:42am K
Permalink S
Make sure all the files are in the exact same place as in my tutorial, and
also check if this is checked at the end of the installation of SDCC
also if you already did run build.bat and there is a Bin directory in the folder u should
remove the Bin folder and run it again..And try to run build.bat as an Administrator, so
right click on the file and select Run as Administrator. Do this for all the command prompts
u open..Hope u can get this solved
h Reply
92/111
9/3/2016
U Joo
P July28,2016at11:13am K Permalink
I have the same problem and I cant resolve it.

Pls help me
h Reply
U Omar
P November24,2015at9:14am K Permalink S
*** Building main.c

C:\Program is not recognized as an internal or external command,
operable program or batch file.
at 1: warning 190: ISO C forbids an empty source file
*** There were errors! ***
*** Done.
Why Noooo :/ I did what you say but I can not
h Reply
U arslan
P December31,2015at9:04am K Permalink S
Very Good Tutorial, I have aa Problum, i have make my usb as per show you in tutorial .
And i Dnt face any problum or any error during making rubber USB. but after complete when
i unplugged and plug again its can not show any thing. or not showing in my PC.
h Reply
U pentestshop
P December31,2015at10:47am K Permalink S
93/111
9/3/2016
Did you use a Corsair stick like i did? And if so first try to recover the USB
Stick back to normal like shown here Recover USB Stick and then start back
from this step Compiling Done and check if u made the HelloWorld.txt
correct using the duckencoder
h Reply
U arslan
P December31,2015at7:58pm K
Permalink S
Yes i have same USB that you have. but just color difference
you have black USB and i have White USB. And i have perform
every singel step like you perform. Now m trying to recover but its nothing
showing in this software , I have connect my USB with Port but in Recovery
software nothing shows my USB. But in Recovery artical you mention there
Short Pin . I do not know how to Shortpin. And which pins i should short?
h Reply
U pentestshop
P January1,2016at7:10
pm K Permalink S
You indeed need to short the pins like shown on
the picture
it is the second and third pin from the corner like shown on the
picture..You best let the recover software open and keep the pins
shorted for a wile while plugging it in..U should then see the usb
stick appearing in the software..Hope this helps u
h Reply
94/111
9/3/2016
U arslan
P January1,2016at
11:25pm K Permalink S
During the shot pin i have break this
pin. and that time its shows in
software, and m trying to format but its stop and
now after breaking pin its show error Driver : D:
Mode 255 ID Error 0001
U pentestshop
P January1,
2016at11:28pm K Permalink
S
What do you mean with u have broke

the pin? On the USB stick ? And i never had that error
before..The format could take some time, but normally
afterwards when u replug the USB Stick it should be
back normal.
U arslan
P January3,2016at
2:05am K Permalink S
Yes, i have break pin no 2. when i trying
shorting pins by mistake. and when i
applying format it takes too much time and i
unplugged. after re plug its shows error like that
Driver : D: Mode 255 ID Error 0001
U arslan
P January1,2016at2:58am K Permalink S
95/111
9/3/2016
And when i open software for Recovery its does not showing any thing. But when i click on Update its
generate QC.ini file which write below,
[PenDriveMP]
IC Type=PS2251-03
[Parameter Mark]
Parameter Type=F1_MP_21
[Customize Info]
USB VID=0x13FE
USB PID=0x5200
String Product Name=USB DISK 3.0
String Manufacturer Name=Toshiba
Inquiry Version=PMAP
[Configuration]
Reset Serial Number=0
Partition Boundary MB=999999999
[TestItemOption]
Do Preformat Test=1
[Extra]
Mode=3
[Misc]
Privacy Volume Label=USB DISK
Wafer Erase All=1
set1667=0x00
[Advance]
FC1=0xFF
FC2=0x01
CheckUSBConnectorType=0x22
[Firmware]
ISP=1
Burner File=BN03V104M.BIN
Firmware Name=FW03FF01V10053M.BIN
h Reply
U pentestshop
P January1,2016at7:12pm K Permalink
This is normal,just do what i just told u..Shorten then pins while pluggin it
in..It is not that easy to do, but after a couple off tries it should go.
h Reply
96/111
9/3/2016
U arslan
you can here my error

here is mmy usb that i had broke a pin
h Reply
U arslan
97/111
9/3/2016
98/111
9/3/2016
h Reply
U pentestshop
from what i see here on the picture it is not the same chip as i have, u told
me u had the same stick as mine only in white..But if i look close at your
picture is see that on your chip it says TOSHIBA .. Thats why u cant recover the stick with
my software..U will need the recover software for your stick..I can maybe help if you give
me all the things that are written on the Toshiba chip..
h Reply
U Arslan
Yes dear yesterday i had buy new one usb suchas i buy before. I have uploaded pic. Now i
follow your manual tutorial download all software and i create as create you. No error face
during installation its same like your tutorial. But when i unplugged and replug its nothing
shows. And after that i checked my system driver its shows yellow mark and not installed when m trying to
install its shows me error.
99/111
9/3/2016
This is my USB
And thats Driver error, You can see below
100/111
9/3/2016
And when m trying to upload/ or reinstall its gives me error. see below
h Reply
101/111
9/3/2016
U pentestshop
Try this please

To restore your Toshiba USB Stick to a flash disk you can do the following steps:
1. Bring it Into Boot Mode
2. Download and extract: MPALL_v3.63_0D
3. Create QC.ini with following content:
[PenDriveMP]
IC Type=PS2251-03
[Parameter Mark]
Parameter Type=F1_MP_21
[Customize Info]
USB VID=0x13FE
USB PID=0x5200
String Product Name=USB DISK 3.0
String Manufacturer Name=Toshiba
Inquiry Version=PMAP
[Configuration]
Reset Serial Number=0
Partition Boundary MB=999999999
[TestItemOption]
Do Preformat Test=1
[Extra]
Mode=3
[Misc]
Privacy Volume Label=USB DISK
Wafer Erase All=1
set1667=0x00
[Advance]
FC1=0xFF
FC2=0x01
CheckUSBConnectorType=0x22
[Firmware]
ISP=1
Burner File=BN03V101.BIN
Firmware Name=FW03FF01V10053M.BIN
4. Start: MPALL_F2_v363_0D.exe -> Click on Start
5. Unplug the stick after finishing
6. Mode 3 will use the complete storage (Windows will see only a few MB Storage on the
first partition of the stick. I used cfdisk from ubuntu to erase the first partition and
102/111
9/3/2016
create one big partition. You can also use the Windows Tool: Restore-v3.13.0.0.rar to
restore the storage. After that you can format it with windows.)
7. Now you have a brand new Flash Stick with 14,44 GB Memory free
103/111
9/3/2016
h Reply
U Arslan
P January4,2016at7:05pm K Permalink S
YES dear i have checked it. But it can not give me permission for modifation. When i pluggin
its give me error that i have mention already. I think its have no solution because its pin
break. But i have Buy another USB but its also still not work. I have windows 10 and i
checked 2 laptops both are giving me same error. Driver not installed. Your USB work on Windows 10?
h Reply
104/111
9/3/2016
U pentestshop
Yes my Usb stick works under Windows 10, but its also another stick then
the one u use!..I tried looking for the fault u got but cant same to find the
right solution..I would like to help to get your usb stick working again, but since i dont
own that kind off usb stick that u use i cant try it for myself..But maybe you can find the
right solution here LINK
h Reply
U mario
hola mi pregunta es donde se guardaran todas la informacion que se puedan conseguir

h Reply
U pentestshop
no puedes guardarlo en una memoria USB , pero u puede guardarlo a

distancia ..
Lo siento por la mala traduccin
h Reply
U Arslan
Which USB that work under windows 10, But afterall My Payload hello world works on
windows7 perfectly. And now I am able to remove payload and get back orignal USB. Thank
Dear of all things.
1 thing i wana ask you, can we put exe with payload , for example if we put usb then exe will run.?
h Reply
105/111
9/3/2016
U pentestshop
P January6,2016at11:59am K Permalink
This USB Stick works for sure under Windows 10

And i am glad u finally got it all working.
The question about if you can put a exe payload on to the USB Stick is NO.
But its much better to put a powershell exploit onto the BadUSB
You can then make a powershell script to download your exe from somewhere.
But most virus scanners or anti-malware software will block that, unless you first set a
script to disable it all
look here for the powershell script
LINK
h Reply
U Arslan
P January6,2016at11:19pm K Permalink S
Thank You, But i am not understand how to do that, There on 3 Different scripts i do not
know which is better one. I do not know how to use it, i have seen many videos about using
Powershell script, But They shows some different methods, If You have a time can you
please make video about Powershell Script, Or How to Use Powershell Script in Rubber Ducky.
Thanks
h Reply
106/111
9/3/2016
U pentestshop
P January11,2016at12:46am K Permalink
No problem, and i will sure keep it in mind to make a video some day.
But i am very busy now working on the launch off the new OsmocomBB
guides.
And planning on selling those phones
h Reply
U blackornish
P March30,2016at3:57pm K Permalink S
hello, i want to buy this one.

How can I buy this USB?
Please send an email to me.
blackornish@gmail.com
h Reply
U pentestshop
P March30,2016at4:01pm K Permalink
Sorry,the usb stick is currently not available,im looking for some new
supported sticks since u cant buy the corsair anymore.
h Reply
U Datalife
hi guys , i have a some questions , but , every time I want to send the payload in the ducky
usb , I must to recover a usb stick?????????
107/111
9/3/2016
h Reply
U Datalife
hi guys , i have a some questions , but , every time I want to send the payload in the ducky
usb , I must to recover a usb stick?
h Reply
U pentestshop
P April21,2016at6:47pm K Permalink
Yes u indeed always need to flash it back to stock,with a real usb rubber
ducky u have a micro sd card slot where you can put your payloads on to
change them..But since this is a normal USB Stick u need to do it manualy.
h Reply
U dak47
P May2,2016at6:18am K Permalink S
Under C: \ fw \ Psychson-master \ tools I created DriveCom.exe, EmbedPayload.exe and

Injector.exe.
I created also C: \ fw \ Psyschson-master \ firmware \ bin \ bn.bin
Next, I secured the firmware from a USB stick and injected in this my Hello World inject.bin
After that I wanted to copy the infected firmware back on the stick, but I get an error every time after I
added the stick in the boot mode,
so that it is not possible for me to use the custom firmware.
Terminal says:
C:\Windows\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=F /action=SetBootMode
Action specified: SetBootMode
108/111
9/3/2016
C:\Windows\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=F /action=SendExecutable

/burner=c:\fw\fw_bn\BN03V104M.BIN
Action specified: SendExecutable
FATAL: System.InvalidOperationException: Header not accepted
bei DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) in c:\fw\Psychsonmaster\DriveCom\DriveCom\PhisonDevice.cs:Zeile 256.
bei DriveCom.PhisonDevice.TransferFile(Byte[] data) in c:\fw\Psychsonmaster\DriveCom\DriveCom\PhisonDevice.cs:Zeile 238.
bei DriveCom.Startup._ExecuteImage(String fileName) in c:\fw\Psychsonmaster\DriveCom\DriveCom\Startup.cs:Zeile 403.
bei DriveCom.Startup.Main(String[] args) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:Zeile 109.
C:\Windows\system32>
so help would be nice!
h Reply
U pentestshop
P June18,2016at5:25pm K Permalink
Try unplugging and entering boot mode again. It is possible to enter boot
mode by shorting the pins yet disrupting future communication with the
NAND chip, and it looks like that may be what happened here.
h Reply
U dpfamily
P June19,2016at9:10am K
Permalink S
I have the exact Same problem I foolowed the instructions
and i was able to copy paste and execute the first 3 command
lines but i got the same errors as dak47 when i am tried
c:\fw\Psychson-master\tools\DriveCom.exe /drive=E /action=SendExecutable
/burner=c:\fw\fw_bn\BN03V104M.BIN i get the same errors as dak47 I
havent tried to shorten the pins. Anyother solution? thank you so much for
this great guide you have done a great job.
h Reply
109/111
9/3/2016
U dpfamily
P June19,2016at9:12am K Permalink S
any lack with your problem? i have the same problem!

h Reply
U sfsfdf
mee too
h Reply
U user_1306
P July26,2016at11:32am K Permalink S
we cannot just change the hello.txt file to change the script ?

h Reply
U nameless
P August23,2016at7:08am K Permalink S
Hey just wondering if these usbs will work

Phison 2251-61
Phison 2251-67
h Reply
U pentestshop
No, it only works with a Phison 2251-03 nand chipset

110/111
9/3/2016
h Reply
LeaveaReply
Comment
Name(Required)
Email(Required)
Website
ENTERCAPTCHA*
4
=four
SubmitComment
Notifymeofnewpostsbyemail.
CopyrightPentestingshop
111/111

Make Your Own USB Rubber Ducky Using A Normal USB Stick - PDF

Hochgeladen von

Dokumentinformationen

Originaltitel

Copyright

Verfügbare Formate

Dieses Dokument teilen

Dokument teilen oder einbetten

Freigabeoptionen

Stufen Sie dieses Dokument als nützlich ein?

Sind diese Inhalte unangemessen?

Copyright:

Verfügbare Formate

Make Your Own USB Rubber Ducky Using A Normal USB Stick - PDF

Hochgeladen von

Copyright:

Verfügbare Formate

9/3/2016

is the vendor? Corsair,Kingston,Patriot,..?

Have you tried?

Detailed Information of the Stick using FlashDriveInfoExtractor:

Yes you must use the files BN03V104M.BIN and

(burner from C:\fw\fw_bn\BN03V104M.BIN)

Does your blog have a contact page? Im having a tough

thanks for the information i will definitely look into that!

Nice response in return of this question with genuine arguments and

very cool, awesome

Microsoft Windows [Version 6.3.9600]

File System: NTFS

I have the same problem and I cant resolve it.

*** Building main.c

What do you mean with u have broke

you can here my error

And thats Driver error, You can see below

Try this please

hola mi pregunta es donde se guardaran todas la informacion que se puedan conseguir

no puedes guardarlo en una memoria USB , pero u puede guardarlo a

This USB Stick works for sure under Windows 10

hello, i want to buy this one.

Under C: \ fw \ Psychson-master \ tools I created DriveCom.exe, EmbedPayload.exe and

C:\Windows\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=F /action=SendExecutable

any lack with your problem? i have the same problem!

we cannot just change the hello.txt file to change the script ?

Hey just wondering if these usbs will work

No, it only works with a Phison 2251-03 nand chipset

Das könnte Ihnen auch gefallen