Digispark Attiny85 Scripts (Cheap Rubber Ducky alternative)
We’ve all heard about the Rubber Ducky. A USB device made by hak5 that allows you to run scripts just by plugging the stick in. It works by spoofing itself as an HID (Human interface device) and just executes keystrokes and more. They are an amazing toy for pentesters and aspiring devs to mess around with however they are quite expensive so people have come up with a cheaper solution.
The Digispark Attiny85 microcontroller is a super small & cheap board available to pretty much everyone that lets you do the exact same stuff and technically even more. As you can see with the schematic on the right, it has quite a few pins you can connect various stuff to, to make wonderful stuff.
Apart from that, you can easily push the “DigiKeyboard” library onto it to create your own Rubber Ducky. This is all done via the Arduino language and only requires one piece of software. Technically you can also just use VSC or whatever your IDE of choice is but I’m not sure these have a way to push your files onto the stick.
The use-case of these is obvious. In-person attacks or “funny pranks” on your target. The digispark is an amazing pentesting tool for physical attacks on (server) hardware running Windows, macOS and possibly even Linux.
We have been working on quite a few of these Scripts that do various stuff from simple “trolling” (Change the wallpaper or rickroll people) all the way to opening an RDP connection or sending you their Wifi credentials via email. Have a look at our work below. If you have any questions, feel free to go to our contacts page and message us.