The pictures are for illustrational purposes. The price is per rubber ducky and not for six.

The Hidden HID v2 is a micro-sized USB device that you can use to emulate a keyboard and inject pre-programmed keystrokes into a host computer. Designed to fit entirely within a USB port, it becomes virtually invisible once inserted. The rubber ducky is built around an STM32F042 microcontroller.

HID attacks exploit the trust computers place in human interface devices like keyboards. A malicious actor can use such devices to execute unauthorized commands swiftly. The Hidden HID v2 serves as a tool for cybersecurity professionals to demonstrate and test these vulnerabilities, emphasizing the importance of securing physical access to systems and implementing robust USB port policies.

This project was inspired by a Hackaday.io blog post about the smallest rubber ducky.

The rubber ducky includes:

• STM32F042G6U6 microcontroller

• NCP115AMX330TCG 3.3V LDO regulator

(Note: this rubber ducky does not have the four 1541201NC3060 IR phototransistor.)

Hidden HID v2 - worlds smallest rubber ducky

The rubber ducky can be used for a lot of things, some examples are:

• Automate Tasks: Execute predefined keystroke sequences to automate repetitive tasks.

• Security Testing: Simulate HID-based attacks to assess system vulnerabilities.

• Educational Demonstrations: Showcase the potential risks of unattended USB ports.

• Educational Utility: Ideal for teaching about physical security and the risks of USB-based attacks.

The rubber ducky has a very compact design. At just 2.2mm thick, it fits snugly and discreetly within USB ports.

The programming of this rubber ducky is really straight forward. Utilizes ST's USB bootloader, eliminating the need for additional programming hardware.