Looks like a simple USB sick. Has it’s own CPU, Micro SD storage and can run scripts by pretending to be a keyboard.
Easy way of getting into computers:
Imgur – PSA: Don’t use the ‘save password’ feature, or plug random USBs into your computer.
This is a neat little tool called a USB Rubber Ducky.
It simulates a keyboard. Their motto goes along the lines of “Humans use keyboards. Computers trust humans.”. What they’re trying to say is the computer won’t look at this new device as malicious, because it’s ‘a keyboard’. It types at 1000 words a minute, meaning it takes about 8 seconds to completely infect a computer with a small scale payload. It has been featured on the tv show Mr. Robot.
You can get it here:
Take Social Engineering to the next level with a USB Rubber Ducky Deluxe hidden inside an inconspicuous “thumb drive” case. All the fixings included. Since 201
Source: USB Rubber Ducky Deluxe – HakShop
- Fast 60 MHz 32-bit Processor
- Convenient Type A USB Connector
- Expandable Memory via Micro SD
- Hideable inside an in an innocuous looking case
- Onboard Payload Replay Button
Community Payload Generators, Firmware, Encoders and Toolkits
The USB Rubber Ducky project has fostered considerable innovation and creativity among the community. Some gems include
- Customize pre-assembled attacks from our repository – Payload Wiki
- Online Duck Toolkit for simple Reconnaissance, Exploitation and Reporting
- The Simple Ducky Payload Generator for Linux with Password Cracker and Meterpreter and Netcat integration
- VID & PID Swapper to cloak your device
- Ducky-Decode Firmware and Encoder adding Mass Storage, Multiple Payloads, Multilingual and and much more.
- And of course the USB Rubber Ducky Forums for Payload sharing, suggestions, questions and information.
–jeroen