Writing Your First Payload

Making DuckyScript Payloads on the USB Nugget

The USB Nugget supports DuckyScript™, making it easy to create your first payload!
If you need inspiration, you can find a list of DuckyScrit payloads on the Hak5 GitHub repository. 
To get started, let's review the full list of DuckyScript™ commands the RubberNugget supports.
DuckyScript™ Payload Structure
When composing a DuckyScript™ payload, commands are executed line by line. It's also possible to press multiple keys at the same time by putting commands on the same line!
To write out a piece of text, type STRING in all caps.  See the example below for how this works:
Example
Result
SHIFT
c
Type the Shift key and then the c key
SHIFT c
Press the Shift key and the c key at the same time
STRING SHIFT c
Types out "SHIFT c"
Built-in Commands
Now that we have the basics down, let's take a look at supported commands:
Command
Example
Description
REM
REM Hello World!
This is used to leave comments, and is not executed in the script
DEFAULTDELAY or DEFAULT_DELAY
DEFAULTDELAY 200
This sets the default time in ms between each command
DELAY
DELAY 1000
Sets a one-time delay in ms
STRING
STRING Hello World!
Types whatever string follows the command
LED
LED R
Changes the color of the LED. 
Current Options: 
R = red, G = green, B = blue, C = cyan, Y = yellow, M = magenta,  W = white
Supported Keys
Most standard keys are supported by the Rubber Nugget.
Key
a - z
A - Z
0 - 9
F1 - F12
Modifier Keys
Keys like SHIFT, ALT, and the WINDOWS or GUI key can be useful for accessing hotkey combinations, are are frequently used in combination key presses.
Key
CTRL or CONTROL
SHIFT
ALT
WINDOWS or GUI
Other Useful Keys
Virtually anything you can do behind a keyboard can be recreated with the right keypresses. The following keys are essential to trigger keyboard shortcuts and navigate without a mouse.
Key
ENTER
MENU or APP
DELETE
HOME
INSERT
PAGEUP
PAGEDOWN
UP or UPARROW
DOWN or DOWNARROW
LEFT or LEFTARROW
RIGHT or RIGHTARROW
TAB
END
ESC or ESCAPE
SPACE
PAUSE or BREAK
CAPSLOCK
NUMLOCK
PRINTSCREEN
SCROLLLOCK
Now that we've gone over the supported DuckyScript commands, let's load and deploy a payload to the USB Nugget.

Example	Result
SHIFT c	Type the Shift key and then the c key
SHIFT c	Press the Shift key and the c key at the same time
STRING SHIFT c	Types out "SHIFT c"

Command	Example	Description
`REM`	`REM Hello World!`	This is used to leave comments, and is not executed in the script
`DEFAULTDELAY` or `DEFAULT_DELAY`	`DEFAULTDELAY 200`	This sets the default time in ms between each command
`DELAY`	`DELAY 1000`	Sets a one-time delay in ms
`STRING`	`STRING Hello World!`	Types whatever string follows the command
`LED`	`LED R`	Changes the color of the LED. Current Options: R = red, G = green, B = blue, C = cyan, Y = yellow, M = magenta, W = white

Key
`a` - `z`
`A` - `Z`
`0` - `9`
`F1` - `F12`

Key
`CTRL` or `CONTROL`
`SHIFT`
`ALT`
`WINDOWS` or `GUI`

Key
`ENTER`
`MENU` or `APP`
`DELETE`
`HOME`
`INSERT`
`PAGEUP`
`PAGEDOWN`
`UP` or `UPARROW`
`DOWN` or `DOWNARROW`
`LEFT` or `LEFTARROW`
`RIGHT` or `RIGHTARROW`
`TAB`
`END`
`ESC` or `ESCAPE`
`SPACE`
`PAUSE or BREAK`
`CAPSLOCK`
`NUMLOCK`
`PRINTSCREEN`
`SCROLLLOCK`

Guides - Previous

Update Your USB Nugget with ESPtool

Next - Guides

Loading Payloads on the Nugget

Last modified 6mo ago