How a USB Rubber Ducky Can Trick Your Computer

Big thanks to Proton VPN for sponsoring this video. To get a 75% discount on Proton VPN this Black Friday month, please use the following link: https://protonvpn.com/davidbombal

// Buy Hak5 coolness //
Buy Hak5 stuff here: https://davidbombal.wiki/gethak5

Why does the USB Rubber Ducky look like a normal flash drive but behave like a keyboard? Darren Kitchen, founder of @hak5, tells David Bombal how a tool for fixing printers became a famous hacking device.

@DarrenKitchen shares the story behind the USB Rubber Ducky, from hiding early circuit boards inside actual rubber ducks to building DuckyScript and developing a security tool used for automation, awareness training, and authorized red teaming.

We explore why computers accept input from USB keyboards, how keystroke injection works, and why an apparently harmless device can issue commands much faster than a person. Darren also explains Keystroke Reflection, a technique that uses keyboard indicator signals such as Caps Lock, Num Lock, and

Scroll Lock to transfer small amounts of data without relying on a normal network connection, when the host and access conditions permit it.

In this conversation:
• Why the Rubber Ducky originally helped Darren fix printers and network shares
• How a USB device can identify itself as a human interface device (HID)
• What DuckyScript does and how it evolved
• The security implications of high-speed keystroke injection
• How Keystroke Reflection works in principle, including air-gapped scenarios
• Darren’s stories about the Rubber Ducky appearing in television and film
Learn more about the USB Rubber Ducky: https://shop.hak5.org/products/usb-ru… Hak5’s explanation of Keystroke Reflection: https://shop.hak5.org/blogs/usb-rubbe…

What surprised you most: that it started as an IT shortcut, or the keyboard LED technique? Let us know in the comments. This interview discusses security research and authorized testing. Only use security tools on systems you own or are explicitly permitted to assess.

// Darren Kitchen SOCIAL //
YouTube: / darrenkitchen
Website: https://hak5.org/pages/hack-across-am…
X: https://x.com/hak5darren

// Hak5 WEBSITE //
https://davidbombal.wiki/gethak5

// David’s Social //

================
Coect with me:
================
Discord: http://discord.davidbombal.com
X: https://www.x.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube Main https://www.youtube.com/davidbombal
YouTube Tech: https://www.youtube.com/chael/UCZTIRrENWr_rjVoA7BcUE_A
YouTube Clips: https://www.youtube.com/chael/UCbY5wGxQgIiAeMdNkW5wM6Q
YouTube Emerging Technologies: https://www.youtube.com/chael/UCbY5wGxQgIiAeMdNkW5wM6Q
YouTube Shorts: https://www.youtube.com/chael/UCEyCubIF0e8MYi1jkgVepKg
Apple Podcast: https://davidbombal.wiki/applepodcast
Spotify Podcast: https://open.spotify.com/show/3f6k6gERfuriI96efWWLQQ
SoundCloud: / davidbombal

================
Support me:
================
Or, buy my CCNA course and support me:
DavidBombal.com: CCNA ($10): http://bit.ly/yt999ccna
Udemy CCNA Course: https://bit.ly/ccnafor10dollars
GNS3 CCNA Course: CCNA ($10): https://bit.ly/gns3ccna10

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

// MENU//
0:00 – Intro
0:30 – Hak5 Rubber Ducky origins
01:28 – What is a Rubber Ducky?
04:07 – Proton VPN sponsor segment
06:54 – How it works + origin story
12:03 – How the Rubber Ducky was created
13:40 – DuckyScript
17:48 – A powerful tool for automation
19:02 – Keyboard vulnerability // Rubber Ducky payload
23:58 – Rubber Ducky in media // Conclusion

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

Disclaimer: This video is for educational purposes only.

#USBRubberDucky #Hak5 #Cybersecurity

subscribe
  • David Bombal