Upgrade The Cheapest USB Rubber Ducky with Raspberry Pi Pico + CircuitPython
A guide to setup the raspberry pi pico with circuitpython to be a USB rubber ducky
Welcome back Internet,
Long time no write an article because of some busy stuff I am doing.
The story was began from my last article about The Cheapest USB Rubber Ducky. I don’t know why my Digispark can’t be booted again after rewrite payload like 4–5 times, If you have an Idea about problem in Digispark, please tell me in the comment.
Then I need some update for the USB rubber ducky, but must be still cheaper. So rather than use Arduino (because this programmable board using C language), I move up to the cheapest Raspberry Pi. That is Raspberry Pi Pico.
The specific type and price of my raspberry pi pico in the pictures below:
Before jumping in to build session, you must prepare this stuff:
- Raspberry Pi Pico (any version)
- Thonny IDE (https://thonny.org/), I like this IDE because it is very light and user friendly.
- A computer (I’m using Windows OS, for making this guide be simple as I can, lol)
- A glass of coffee and an intention (not really, just a joking)
Do you have all of the requirements?
Let’s build…
Install the CircuitPython
Press the boot button while you connecting the raspberry pi pico to the computer.
The boot button is looks like this picture above.
After it connected well, RPI-RP2 drive appears in This PC.
Download the CircuitPython firmware from this site https://circuitpython.org/board/raspberry_pi_pico/ then copy the uf2 file to the RPI-RP2 (E:) drive.
Wait for a second, and the device will reboot and coming with another name, CIRCUITPY (E:).
Don’t change anything, except two items below:
- Directory lib
- code.py
Congratulation you have been success install the circuitpython.
The next step is configure your Thonny IDE
Select CircuitPython as the interpreter, then select your USB port which the raspberry pi pico connected.
When you click the OK button, this information will come to the Shell.
Let’s test the raspberry pi pico with a simple program, blinking board :D
save to code.py if you wanna run automaticly.
Then Just re-plug your raspberry pi pico. Then Voila…
Configure CircuitPython to be USB Rubber Ducky
The next step is installing the Rubber Ducky converter in the raspberry pi pico.
- Go to github.com/adafruit/Adafruit_CircuitPython_Bundle/releases and download the adafruit-circuitpython-bundle-7.x-mpy-20221211.zip file. Make sure that it is the 7.x one as we are using 7.3.3 CircutPython.
- Unzip the folder and go into its lib folder. Find the folder adafruit_hid and copy it. Go into your Raspberry Pi’s lib folder and paste it.
3. Also make sure you copy asyncio , adafruit_debouncer.mpy and adafruit_ticks.mpy from adafruit-circuitpython-bundle-7.x-mpy-20221211.zip. After it complete, in the lib folder, seem like this picture below.
All library above, are needed for supporting the duckyinpython, so make sure you put all of that in the lib folder, If you don’t wanna have a trouble.
4. Copy this code https://github.com/dbisu/pico-ducky/blob/main/duckyinpython.py to code.py.
2. Build a ducky script payload and save as payload.dd
This is my sample payload, as a proof that our USB Rubber Ducky is working.
REM This only works against a Windows victim!
GUI r
DELAY 5000
STRING notepad.exe
ENTER
DELAY 1000
STRING ------------------------
ENTER
STRING Hacked by Febi Mudiyanto
ENTER
STRING ------------------------Editing payload
To edit the payload, enter setup mode by connecting the pin 1 (
GP0) to pin 3 (GND), this will stop the pico-ducky from injecting the payload in your own machine. The easiest way to so is by using a jumper wire between those pins as seen bellow. (https://github.com/dbisu/pico-ducky)
Demo
Conclusion
This is an upgrade from my last rubber ducky with Digispark. With this Raspberry pi pico, you have more storage, and more capabilities with CircuitPython. Don’t limit yourself. Your limitation is your imagination.
Thank you.
More content at PlainEnglish.io. Sign up for our free weekly newsletter. Follow us on Twitter, LinkedIn, YouTube, and Discord.
Interested in scaling your software startup? Check out Circuit.
