Rubber Ducky Crash Course

The USB Rubber Ducky looks like an ordinary flash drive, but to a computer it is a trusted keyboard — and that trust is exactly what makes keystroke-injection attacks so powerful. This fast-paced crash course takes you from zero to writing and deploying your own BadUSB payloads, teaching you how a few seconds of physical access can be turned into a full compromise, and how defenders can stop it.

Across focused, hands-on modules you will learn how Human Interface Device (HID) attacks work, master the DuckyScript language, and build payloads for Windows, macOS, and Linux. You will explore reconnaissance, credential capture, reverse shells, and exfiltration payloads, learn evasion and timing techniques, and see how the same ideas apply to other BadUSB devices. Every attack is paired with the defensive controls that mitigate it.

By the end of this crash course, you will be able to write reliable DuckyScript payloads from scratch, adapt them to real target environments, understand the role of physical access in red team engagements, and advise organisations on how to defend against USB-based threats.

Disclaimer: This course is intended strictly for educational and authorised security testing purposes. All payloads are deployed only on devices you own or are explicitly authorised to test, within isolated lab environments. Unauthorised use of any technique taught in this course is illegal and strictly prohibited.