Real-World Rubber Ducky Attacks with Empire Stagers

Real-World Rubber Ducky Attacks with Empire Stagers

Nine times out of ten, my goal when using a Rubber Ducky on pentests is to launch an Empire or Meterpreter session. However, for the Ducky to type out an entire stager often takes too much time to be practical for most real-world USB attacks. This article outlines three techniques to optimize the speed and minimize user detection of the Rubber Ducky.