The USB Rubber Ducky is the device that invented keystroke injection as an attack vector. It's a USB device that looks exactly like a generic flash drive but presents to the target computer as a USB keyboard. It types pre-programmed keystroke sequences at superhuman speed — up to 1000 words per second. Because it's seen as a keyboard by the OS, no antivirus, no application allow-listing, no endpoint detection stops it. Keyboards are trusted by default. There have been two har

Here's the complete workflow from blank file to shell on target, covering syntax, common patterns, compilation, testing, and deployment across all current Hak5 implant platforms. This article / guide is on how to create DuckyScript payloads.

DuckyScript is the domain-specific language created by Hak5 for programming keystroke injection attacks. It's the engine behind the USB Rubber Ducky, and now runs on nearly every Hak5 implant — O.MG Cable, Key Croc, Packet Squirrel Mark II, WiFi Pineapple Pager, Bash Bunny, and the Shark Jack. Despite its simple appearance, the language has evolved through three major generations with dramatically different capabilities.

The USBNinja cable architecture is distinct from the O.MG cable. Where O.MG uses WiFi + ESP32, the Ninja Cable uses Bluetooth LE + ATtiny85 with V-USB and adds a Hall effect sensor for magnetic ring triggering. The firmware is fully open-source and well-documented. Here's how to build a functional clone, from easiest to most authentic. This is a guide on how to build your own USBNinja cable.

Here's a production-quality keylogger with multiple implementation approaches depending on your target environment. This is a guide on how to create keyloggers.