Arduboy Rubber Ducky
I’ve had the Arduboy since backing it back in May of 2015. I played with it a little bit when I first got it but for the most part it’s been sitting in my drawer.
I’ve also been following Hak5 for a while and one of their projects I’ve always really liked is the USB Rubber Ducky. I dont own one myself but I have always liked the idea of the automated HID attacks, especially with the DuckyScript language and all the available community payloads.
About a week ago I decided it would be a good idea to take my Arduboy out of storage and try developing something small for it. After I realized it has an ATmega32u4 I thought I could use Dckuino.js, a DuckyScript to Arduino converter, and have it run on the Arduboy.
Once I got a basic DuckyScript to work, I thought I could add more than one DuckyScript and write a selection menu in order to take advantage of the buttons on the Arduboy.
Lastly, I added a splash screen after the initial boot process that shows a rubber ducky icon. In order to get into the actual selection menu for the DuckyScripts you have to press the Konami Code sequence. After that you should see a menu with all the payloads on the Arduboy.
Its also a good idea to install Arduboy from the
Boards Manager in the Arduino IDE. To do this just go to preferences and add the following to "Additional Boards Manager URLs":
After that you can just go to Tools > Boards > Boards Manager, search for Arduboy and install it.
I also recommend installing the Arduboy2 library as the main branch of the Arduboy library is not currently being maintained.
Once everything is up and running it would be a good idea to try out some examples and even some games from the Arduboy team just to get used to the uploading to board process.
Whenever you’re ready to upload the Arduboy Rubber Ducky code to your Arduboy you only need to press the upload button and you’re done.
I’ve included the basic “Hello World” payloads with my code but you can either write your own DuckyScript payloads or get some from the community payloads. You can convert from DuckyScript to Arduino by using the Dckuino.js converter which I’m hosting myself to have everything in one place. After converting your DuckyScript payload, you can just copy the contents of the
setup function and add it the the
After that just scroll down to the end of the
ducky.h file and add the function you just created to the list as well as a label for the menu.
I noticed in my testing that the payloads run a little slower coming from the Arduboy. You may find that you have to increase the delays in the scripts so that the commands run at the appropriate time.
Depending on which payloads I’m using I also sometimes run into size issues so this is something to keep in mind as you choose your payloads.
I’m going to try to get my hands on an actual USB Rubber Ducky at some point so that I can compare execution times. With that comparison I should be able to figure out what sort of delays will make more sense for the Arduboy and I can modify Dckuino.js to convert specifically for it.
Feel free to contact me with any questions you may have.
You can also follow @benjifs on Twitter.