Hacker Devices: Wi-Fi USB Rubber Ducky

Excerpt From wi-fi vulnerabilities part 2 Webinar Watch This Video to Learn More About Hacker Devices: Wi-Fi USB Rubber Ducky. A Wi-Fi USB rubber ducky is a readily available pen testing tool which plugs into a target device and uses a Wi-Fi-based command and control interface to remotely execute code, inject keystrokes, and exfiltrate data. It uses the Wi-Fi protocol to perform a variety of malicious actions, much like a poor USB attack. This technology allows attackers to physically enter a target site and remotely control the hacked system from a distance, explained by CTO Dr. Brett Walkenhorst in the video below.

Key Takeaways

• A Wi-Fi USB Rubber Ducky costs around 13 dollars on Amazon
• It injects keystrokes, runs code, and exfiltrates data over a Wi-Fi command-and-control interface
• Brief physical access, such as slipping it into a server rack, is enough to deploy it
• An attacker can then control the target remotely from nearby, like a parking lot

Video Transcript

And this is readily available from places like Amazon and some other distributions. So here's an example of a WiFi USB rubber ducky. I looked this morning, and it was thirteen bucks on Amazon. Pretty cool. You can plug it into some target and remotely execute code, inject keystrokes, exfiltrate data, all using a command and control interface operating over WiFi.

So you can imagine I just need to get physical access to some place that I want to attack can get inside of a data center, for example, or get someone to slip this in the back of some server rack, then I can go out in the parking lot and command and control anything I want from that from that server.

Other things similarly apply. But this is a a nefarious little device that uses the Wi Fi protocol to enable all kinds of attacks similar to a bad USB type of attack.