Post by Harsh Vardhan Singh

I Built a USB Rubber Ducky Using Digispark! 💻 Hey everyone! I'm sharing a recent project where I developed a USB-based offensive security tool using the Digispark ATtiny85 microcontroller — a compact yet powerful device that emulates a keyboard to automate payload execution. What It Does Once plugged into a Windows machine, the Digispark: Launches PowerShell with administrator privileges using key emulation Automatically bypasses UAC prompts Extracts WiFi passwords and system information Saves the stolen data to the victim’s Desktop But here's the twist I’m currently working on — instead of leaving traces on the victim’s system, I’m shifting the dump location to a plugged-in pendrive (USB storage). ➡️ This minimizes forensic footprint and boosts stealth, simulating real-world adversary techniques. 🛠️ Tech Stack Digispark ATtiny85 + Arduino IDE Windows 11 environment PowerShell scripting Bash and USB HID emulation 📂 Use Case: This is a proof-of-concept (PoC) demonstration for educational and awareness purposes — helping students and security enthusiasts understand how Human Interface Device (HID) attacks work and how to defend against them. 🧠 What I Learned: How USB HID devices can be exploited How attackers automate post-exploitation Real-world red-teaming simulations using microcontrollers 🧪 Next Step: Rubber Ducky in a Week! I’m taking this further by building a fully programmable Rubber Ducky using Raspberry Pi Pico in under a week — stay tuned! 📎 GitHub Repo (Payloads): 🔗 https://lnkd.in/gbjEbPRS 🙌 I’ll soon be releasing: Plug-and-play scripts for data exfiltration to USB Raspberry Pi Pico-based HID attack framework Tutorials for beginners 💬 Let’s connect if you’re into: Offensive security Hardware hacking Red teaming and USB exploits 👉 Feel free to drop any suggestions or questions! #Cybersecurity #USBHacking #Digispark #RedTeam #HIDAttack #Arduino #RaspberryPi #InfoSec #EthicalHacking #BugBounty #OffensiveSecurity #HardwareHacking

Video Content