BadUSB Payload Development Launcher
This Project was created to give the Community the ability to develop BadUSB payloads without plugging in a device, loading the device, loading the experimental payload, then executing on device. This allows "some" DuckyScript™1/BadUSB scripts to be simulated as if a real Device was running the attack. More features will be added later. This project is meant for development and education purposes only.
Q. What does this project do?
A. This project allows you to develop payloads for a device using the correct "core" without plugging in, transferring payload, disconnecting, reconnecting, then testing to see if it works. You don't even need to own a device. Just need a PC with a supported OS.
Q. Will this work on my PC?
A. Currently, this project only supports Windows 10 and Windows 11. - Hence why it's called "BadPowerShell". We have plans to support UNIX/OSX in the future.
Q. So if I have a supported PC, I can just develop Payloads for free?
A. Yes. This is meant to help the community develop/test/experience what BadUSB/DuckyScript™ is all about. Purely educational and for development purposes only.
Q. Do you have a place where I can compare commands of all the versions?
A. Not yet, but in the process of being completed. This repo is supposed to be as accurate as possible, and will only be posted on here once we can verify with documentation or via Developers2.
Q. So BadPS simulates a real BadUSB device?
A. Yes. There's a few limitations such as - Not being able to do CTRL ALT DEL. Other known issue is if Windows User Security Prompt or any screen similar. Test and find out!
Supported Cores
| Core# | Versions |
|---|---|
| 0 | DuckyScript v1 |
| 1 | Flipper Zero BadUSB |
Future Cores
| Versions | Est. Firmware Completion |
|---|---|
| ATTINY85 | Version 2.4 |
| PwnP1 (Orig.) | Version 2.5 |
Note
DuckyScript™ v1 has the some of the same commands as BadUSB on other devices so we are "allowed" to support any command that other open source projects such as the Flipper Zero and other devices. - Also to preserve the history of deprecated DuckyScript™ and BadUSB commands alike.1
- Download the Latest Release of this Repo.
- Unzip the files into the folder of choice.
- Place desired BadUSB/DuckyScript™ payload(s) in the same folder as BadPS.
- Use the syntaxes below for script you want to execute or to enter Dev Mode.
- Enjoy!
BadPS Examples:
.\BadPS.ps1 <badusb_file.txt> - Launch a BadUSB payload
.\BadPS.ps1 --update - Update BadPS to current Version
.\BadPS.ps1 --version - Show local Version of BadPS
.\BadPS.ps1 - Launch BadPS in Dev Mode
Supported DUCKYSCRIPT V1 Core Commands:
DELAY, DEFAULT_DELAY, BACKSPACE, ENTER, STRING_DELAY, GUI, ALT, CTRL, SHIFT, ESCAPE,
CTRL-SHIFT, SHIFT-ALT, SHIFT-GUI, CTRL-ALT, F1-12, UP, DOWN, LEFT, RIGHT, STRING,
TAB, SCROLLLOCK, CAPSLOCK, INSERT, SPACE, PAUSE, PRINTSCREEN
Supported Flipper BadUSB Core Commands:
DELAY, DEFAULT_DELAY, BACKSPACE, ENTER, STRING_DELAY, GUI, ALT, CTRL, SHIFT, ESCAPE,
CTRL-SHIFT, SHIFT-ALT, SHIFT-GUI, CTRL-ALT, F1-12, UP, DOWN, LEFT, RIGHT, STRING,
TAB, SCROLLLOCK, CAPSLOCK, INSERT, SPACE, RELEASE, HOLD, PAUSE, REPEAT, ALTCHAR, ALTSTRING,
PRINTSCREEN, WAIT_FOR_BUTTON_PRESS, STRINGLN
Un-Supported BadUSB Commands:
CTRL-ALT DELETE (due to Windows Limits), Unknown
We have made it about as easy as possible.
PS> .\BadPS.ps1 --update
OR
Just type update in Dev Mode.
Want to help improve the project? Pull Requests Welcome!
Important
Missing a Command? Found a bug? Let us know! Submit them to the Issues section of this Repo.
Footnotes
-
"DuckyScript™ is the programming language of the USB Rubber Ducky™, Hak5® hotplug attack gear and officially licensed devices. (Trademark Hak5 LLC. Copyright © 2010 Hak5 LLC. All rights reserved.)" -- Anything DuckyScript™ v2 and above, We CAN NOT support it at this time. Please do not ask. ↩ ↩2
-
If we are unsure of a command or feature, we will contact the Developer first before posting information and misleading the community. ↩