The Hak5 Rubber Ducky is a professional USB automation device designed for authorised security assessments, IT administration, and cybersecurity research. Disguised as a standard USB flash drive, it functions as a trusted Human Interface Device (HID), enabling security professionals to automate repetitive keyboard-based tasks and evaluate physical security controls within approved environments.
Powered by DuckyScript™ 3.0, the latest generation Rubber Ducky provides a flexible scripting environment for creating custom automation workflows. The updated hardware features both USB-A and USB-C compatibility, making it suitable for use across modern Windows, macOS, Linux, and Android devices.
Compact, portable, and backed by the Hak5 ecosystem, the Rubber Ducky is widely used by cybersecurity professionals, IT administrators, educators, and researchers who need a reliable platform for authorised testing, demonstrations, and workflow automation.
Security Research & Automation
USB Human Interface Device (HID) platform
Designed for authorised penetration testing
Keyboard automation for repetitive administrative tasks
Powered by DuckyScript™ 3.0
Customisable scripting and automation workflows
Cross-platform operation
Supported by the Hak5 PayloadHub community and PayloadStudio development environment
Design & User Experience
Compact USB flash drive form factor
USB-C and USB-A compatibility
Programmable RGB status LED
Programmable push button
Pocket-sized and highly portable
Designed for rapid deployment during authorised security assessments
Connectivity & Compatibility
Works with Windows
Compatible with macOS
Compatible with Linux
Supports Android devices with USB OTG
No additional drivers required on supported operating systems
Compatible with PayloadStudio and DuckyScript™ 3.0
Hardware & Functionality
32-bit AVR microcontroller
MicroSD card support for payload storage
Programmable RGB indicator
JTAG interface
USB-A and USB-C connectivity
Designed for portable automation and authorised cybersecurity research