hak5 /usbrubberducky-payloads

The Official USB Rubber Ducky Payload Repository

★ 6,174⑂ 1,688
PowerShellCreated 2021-07-13usbrubberducky.com
6,174
stars
+21+23+81
1,688
forks
–
watchers
–
prs
–
issues
–
releases
–
discussions

README

Payload Library for the USB Rubber Ducky by Hak5

This repository contains payloads, extensions and languages for the Hak5 USB Rubber Ducky. Community developed payloads are listed and developers are encouraged to create pull requests to make changes to or submit new payloads.

Payloads here are written in official DuckyScript™ specifically for the USB Rubber Ducky. Payloads here must be compiled using Hak5 PayloadStudio. Hak5 does NOT guarantee payload functionality. See Legal and Disclaimers





     









View Featured Ducky Payloads and Leaderboard
Get your payload in front of thousands. Enter to win over $2,000 in prizes in the Hak5 Payload Awards!





     

     

     

     





 Table of contents


About the USB Rubber Ducky
PayloadStudio (Editor + Compiler)
About DuckyScript™
Contributing Payloads
Legal and Disclaimers
 



 Shop
- NEW USB Rubber Ducky
- PayloadStudio Pro
- Shop All Hak5 Tools
 Getting Started
- Build and Encode Payloads with PayloadStudio | QUICK START GUIDE | Your First Payload
 Documentation / Learn More
-   Documentation | Quick Reference Guide
-   Advanced DuckyScript Online Course | Textbook
 Community
Got Questions? Need some help? Reach out:
-  Discord | Forums


 Additional Links
 Follow the creators 

	Korben's Socials	
	  
	

	Darren's Socials
	  
	



About the NEW USB Rubber Ducky

A "flash drive" that types keystroke injection payloads into unsuspecting devices at incredible speeds.



	
Launch Video | 
Introducing Keystroke Reflection |
Introducing OS Detection






New USB Rubber Ducky (A+C, DuckyScript 3.0, 2022)


Computers trust humans. Humans use keyboards. Hence the universal spec — HID, or Human Interface Device.

A keyboard presents itself as a HID, and in turn it's inherently trusted as human by the computer.

The USB Rubber Ducky — which looks like an innocent flash drive to humans — takes advantage of this trust to deliver powerful payloads, injecting keystrokes at superhuman speeds. 

Easily automate any task you can perform with a keyboard with an easy to learn language designed specifically for the USB Rubber Ducky.



 About DuckyScript™

 Legacy DuckyScript (1.0)
Hak5 introduced Keystroke Injection in 2010 with the USB Rubber Ducky™. This technique, developed by Hak5 founder Darren Kitchen, was his weapon of choice for automating mundane tasks at his IT job — fixing printers, network shares and the like.
Today the USB Rubber Ducky is a hacker culture icon, synonymous with the keystroke injection technique it pioneered. It’s found its way into the hearts and toolkits of Cybersecurity and IT pros the world over — including many movies and TV shows!
Core to its success is its simple language, DuckyScript™. Originally just three commands, it could be learned by anyone—regardless of experience—in minutes.

 With the new USB Rubber Ducky in 2022, DuckyScript 3.0 h

Snapshot: 2026-11-10T09:35:25Z · Data license Apache-2.0 · JSON