mirror of
https://github.com/dbisu/pico-ducky.git
synced 2026-01-21 17:26:00 +00:00
Compare commits
5 Commits
board-desi
...
v1.4
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
d4957e2e95 | ||
|
|
6516c8bbe4 | ||
|
|
3a7411e55e | ||
|
|
e51a769cdd | ||
|
|
f02c061543 |
34
README.md
34
README.md
@@ -20,21 +20,30 @@
|
|||||||
|
|
||||||
Install and have your USB Rubber Ducky working in less than 5 minutes.
|
Install and have your USB Rubber Ducky working in less than 5 minutes.
|
||||||
|
|
||||||
1. Download [CircuitPython for the Raspberry Pi Pico](https://circuitpython.org/board/raspberry_pi_pico/). *Updated to 7.0.0
|
1. Clone the repo to get a local copy of the files. `git clone https://github.com/dbisu/pico-ducky.git`
|
||||||
|
|
||||||
2. Plug the device into a USB port while holding the boot button. It will show up as a removable media device named `RPI-RP2`.
|
2. Download [CircuitPython for the Raspberry Pi Pico](https://circuitpython.org/board/raspberry_pi_pico/). *Updated to 7.0.0
|
||||||
|
|
||||||
3. Copy the downloaded `.uf2` file to the root of the Pico (`RPI-RP2`). The device will reboot and after a second or so, it will reconnect as `CIRCUITPY`.
|
3. Plug the device into a USB port while holding the boot button. It will show up as a removable media device named `RPI-RP2`.
|
||||||
|
|
||||||
4. Download `adafruit-circuitpython-bundle-7.x-mpy-YYYYMMDD.zip` [here](https://github.com/adafruit/Adafruit_CircuitPython_Bundle/releases/latest) and extract it outside the device.
|
4. Copy the downloaded `.uf2` file to the root of the Pico (`RPI-RP2`). The device will reboot and after a second or so, it will reconnect as `CIRCUITPY`.
|
||||||
|
|
||||||
5. Navigate to `lib` in the recently extracted folder and copy `adafruit_hid` to the `lib` folder in your Raspberry Pi Pico.
|
5. Download `adafruit-circuitpython-bundle-7.x-mpy-YYYYMMDD.zip` [here](https://github.com/adafruit/Adafruit_CircuitPython_Bundle/releases/latest) and extract it outside the device.
|
||||||
|
|
||||||
6. Click [here](https://raw.githubusercontent.com/dbisu/pico-ducky/main/duckyinpython.py), press CTRL + S and save the file as `code.py` in the root of the Raspberry Pi Pico, overwriting the previous file.
|
6. Navigate to `lib` in the recently extracted folder and copy `adafruit_hid` to the `lib` folder on your Raspberry Pi Pico.
|
||||||
|
|
||||||
7. Find a script [here](https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Payloads) or [create your own one using Ducky Script](https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Duckyscript) and save it as `payload.dd` in the Pico.
|
7. Copy `adafruit_debouncer.mpy` and `adafruit_ticks.mpy` to the `lib` folder on your Raspberry Pi Pico.
|
||||||
|
|
||||||
8. Be careful, if your device isn't in [setup mode](#setup-mode), the device will reboot and after half a second, the script will run.
|
8. Copy `asyncio` to the `lib` folder on your Pico.
|
||||||
|
|
||||||
|
9. Copy `boot.py` from your clone to the root of your Pico.
|
||||||
|
|
||||||
|
10. Copy `duckyinpython.py` as `code.py` in the root of the Raspberry Pi Pico, overwriting the previous file.
|
||||||
|
Linux: `cp duckyinpython.py </path/to/pico/code.py`
|
||||||
|
|
||||||
|
11. Find a script [here](https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Payloads) or [create your own one using Ducky Script](https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Duckyscript) and save it as `payload.dd` in the Pico.
|
||||||
|
|
||||||
|
12. Be careful, if your device isn't in [setup mode](#setup-mode), the device will reboot and after half a second, the script will run.
|
||||||
|
|
||||||
### Setup mode
|
### Setup mode
|
||||||
|
|
||||||
@@ -46,11 +55,10 @@ The easiest way to so is by using a jumper wire between those pins as seen bello
|
|||||||
### USB enable/disable mode
|
### USB enable/disable mode
|
||||||
|
|
||||||
If you need the pico-ducky to not show up as a USB mass storage device for stealth, follow these instructions.
|
If you need the pico-ducky to not show up as a USB mass storage device for stealth, follow these instructions.
|
||||||
Enter setup mode.
|
Enter setup mode.
|
||||||
Copy boot.py to the root of the pico-ducky.
|
|
||||||
Copy your payload script to the pico-ducky.
|
Copy your payload script to the pico-ducky.
|
||||||
Disconnect the pico from your host PC.
|
Disconnect the pico from your host PC.
|
||||||
Connect a jumper wire between pin 18 (`GND`) and pin 20 (`GPIO15`).
|
Connect a jumper wire between pin 18 (`GND`) and pin 20 (`GPIO15`).
|
||||||
This will prevent the pico-ducky from showing up as a USB drive when plugged into the target computer.
|
This will prevent the pico-ducky from showing up as a USB drive when plugged into the target computer.
|
||||||
Remove the jumper and reconnect to your PC to reprogram.
|
Remove the jumper and reconnect to your PC to reprogram.
|
||||||
The default mode is USB mass storage enabled.
|
The default mode is USB mass storage enabled.
|
||||||
@@ -129,6 +137,10 @@ keycode_win_de.mpy
|
|||||||
|
|
||||||
## Useful links and resources
|
## Useful links and resources
|
||||||
|
|
||||||
|
### How to recover your Pico if it becomes corrupted or doesn't boot.
|
||||||
|
|
||||||
|
[Reset Instructions](RESET.md)
|
||||||
|
|
||||||
### Installation Tool
|
### Installation Tool
|
||||||
|
|
||||||
[raspberrypi5621](https://github.com/raspberrypi5621) Created a tool to convert a blank RPi Pico to a ducky.
|
[raspberrypi5621](https://github.com/raspberrypi5621) Created a tool to convert a blank RPi Pico to a ducky.
|
||||||
|
|||||||
7
RESET.md
Normal file
7
RESET.md
Normal file
@@ -0,0 +1,7 @@
|
|||||||
|
# Instructions on how to reset a Raspberry Pi Pico
|
||||||
|
Follow these instructions if your Pico ends up in an odd state
|
||||||
|
|
||||||
|
1. Download the reset firmware from [flash_nuke.uf2](https://datasheets.raspberrypi.com/soft/flash_nuke.uf2)
|
||||||
|
2. While holding the BOOTSEL button on the Pico, plug in the USB cable to your computer.
|
||||||
|
3. When the RPI-RP2 drive shows up on your computer, copy the flash_nuke.uf2 file to the Pico
|
||||||
|
4. After the device reboots, follow the Install instructions [here](https://github.com/dbisu/pico-ducky/blob/main/README.md)
|
||||||
100
duckyinpython.py
100
duckyinpython.py
@@ -18,8 +18,11 @@ import supervisor
|
|||||||
|
|
||||||
import time
|
import time
|
||||||
import digitalio
|
import digitalio
|
||||||
|
from digitalio import DigitalInOut, Pull
|
||||||
|
from adafruit_debouncer import Debouncer
|
||||||
from board import *
|
from board import *
|
||||||
import pwmio
|
import pwmio
|
||||||
|
import asyncio
|
||||||
|
|
||||||
led = pwmio.PWMOut(LED, frequency=5000, duty_cycle=0)
|
led = pwmio.PWMOut(LED, frequency=5000, duty_cycle=0)
|
||||||
|
|
||||||
@@ -128,6 +131,21 @@ time.sleep(.5)
|
|||||||
|
|
||||||
led_pwm_up(led)
|
led_pwm_up(led)
|
||||||
|
|
||||||
|
#init button
|
||||||
|
button1_pin = DigitalInOut(GP22) # defaults to input
|
||||||
|
button1_pin.pull = Pull.UP # turn on internal pull-up resistor
|
||||||
|
button1 = Debouncer(button1_pin)
|
||||||
|
|
||||||
|
#init payload selection switch
|
||||||
|
payload1Pin = digitalio.DigitalInOut(GP4)
|
||||||
|
payload1Pin.switch_to_input(pull=digitalio.Pull.UP)
|
||||||
|
payload2Pin = digitalio.DigitalInOut(GP5)
|
||||||
|
payload2Pin.switch_to_input(pull=digitalio.Pull.UP)
|
||||||
|
payload3Pin = digitalio.DigitalInOut(GP10)
|
||||||
|
payload3Pin.switch_to_input(pull=digitalio.Pull.UP)
|
||||||
|
payload4Pin = digitalio.DigitalInOut(GP11)
|
||||||
|
payload4Pin.switch_to_input(pull=digitalio.Pull.UP)
|
||||||
|
|
||||||
def getProgrammingStatus():
|
def getProgrammingStatus():
|
||||||
# check GP0 for setup mode
|
# check GP0 for setup mode
|
||||||
# see setup mode for instructions
|
# see setup mode for instructions
|
||||||
@@ -161,23 +179,16 @@ def runScript(file):
|
|||||||
print("Unable to open file ", file)
|
print("Unable to open file ", file)
|
||||||
|
|
||||||
def selectPayload():
|
def selectPayload():
|
||||||
|
global payload1Pin, payload2Pin, payload3Pin, payload4Pin
|
||||||
payload = "payload.dd"
|
payload = "payload.dd"
|
||||||
# check switch status
|
# check switch status
|
||||||
# payload1 = GPIO4 to GND
|
# payload1 = GPIO4 to GND
|
||||||
# payload2 = GPIO5 to GND
|
# payload2 = GPIO5 to GND
|
||||||
# payload3 = GPIO10 to GND
|
# payload3 = GPIO10 to GND
|
||||||
# payload4 = GPIO11 to GND
|
# payload4 = GPIO11 to GND
|
||||||
payload1Pin = digitalio.DigitalInOut(GP4)
|
|
||||||
payload1Pin.switch_to_input(pull=digitalio.Pull.UP)
|
|
||||||
payload1State = not payload1Pin.value
|
payload1State = not payload1Pin.value
|
||||||
payload2Pin = digitalio.DigitalInOut(GP5)
|
|
||||||
payload2Pin.switch_to_input(pull=digitalio.Pull.UP)
|
|
||||||
payload2State = not payload2Pin.value
|
payload2State = not payload2Pin.value
|
||||||
payload3Pin = digitalio.DigitalInOut(GP10)
|
|
||||||
payload3Pin.switch_to_input(pull=digitalio.Pull.UP)
|
|
||||||
payload3State = not payload3Pin.value
|
payload3State = not payload3Pin.value
|
||||||
payload4Pin = digitalio.DigitalInOut(GP11)
|
|
||||||
payload4Pin.switch_to_input(pull=digitalio.Pull.UP)
|
|
||||||
payload4State = not payload4Pin.value
|
payload4State = not payload4Pin.value
|
||||||
|
|
||||||
|
|
||||||
@@ -201,6 +212,63 @@ def selectPayload():
|
|||||||
|
|
||||||
return payload
|
return payload
|
||||||
|
|
||||||
|
|
||||||
|
async def blink_pico_led(led):
|
||||||
|
print("starting blink_pico_led")
|
||||||
|
led_state = False
|
||||||
|
while True:
|
||||||
|
if led_state:
|
||||||
|
#led_pwm_up(led)
|
||||||
|
print("led up")
|
||||||
|
for i in range(100):
|
||||||
|
# PWM LED up and down
|
||||||
|
if i < 50:
|
||||||
|
led.duty_cycle = int(i * 2 * 65535 / 100) # Up
|
||||||
|
await asyncio.sleep(0.01)
|
||||||
|
led_state = False
|
||||||
|
else:
|
||||||
|
#led_pwm_down(led)
|
||||||
|
print("led down")
|
||||||
|
for i in range(100):
|
||||||
|
# PWM LED up and down
|
||||||
|
if i >= 50:
|
||||||
|
led.duty_cycle = 65535 - int((i - 50) * 2 * 65535 / 100) # Down
|
||||||
|
await asyncio.sleep(0.01)
|
||||||
|
led_state = True
|
||||||
|
await asyncio.sleep(0)
|
||||||
|
|
||||||
|
async def monitor_buttons(button1):
|
||||||
|
global inBlinkeyMode, inMenu, enableRandomBeep, enableSirenMode,pixel
|
||||||
|
print("starting monitor_buttons")
|
||||||
|
button1Down = False
|
||||||
|
while True:
|
||||||
|
button1.update()
|
||||||
|
|
||||||
|
button1Pushed = button1.fell
|
||||||
|
button1Released = button1.rose
|
||||||
|
button1Held = not button1.value
|
||||||
|
|
||||||
|
if(button1Pushed):
|
||||||
|
print("Button 1 pushed")
|
||||||
|
button1Down = True
|
||||||
|
if(button1Released):
|
||||||
|
print("Button 1 released")
|
||||||
|
if(button1Down):
|
||||||
|
print("push and released")
|
||||||
|
|
||||||
|
if(button1Released):
|
||||||
|
if(button1Down):
|
||||||
|
# Run selected payload
|
||||||
|
payload = selectPayload()
|
||||||
|
print("Running ", payload)
|
||||||
|
runScript(payload)
|
||||||
|
print("Done")
|
||||||
|
button1Down = False
|
||||||
|
|
||||||
|
await asyncio.sleep(0)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
progStatus = False
|
progStatus = False
|
||||||
progStatus = getProgrammingStatus()
|
progStatus = getProgrammingStatus()
|
||||||
|
|
||||||
@@ -215,11 +283,11 @@ else:
|
|||||||
print("Update your payload")
|
print("Update your payload")
|
||||||
|
|
||||||
led_state = False
|
led_state = False
|
||||||
while True:
|
|
||||||
if led_state:
|
async def main_loop():
|
||||||
led_pwm_up(led)
|
global led,button1
|
||||||
led_state = False
|
pico_led_task = asyncio.create_task(blink_pico_led(led))
|
||||||
else:
|
button_task = asyncio.create_task(monitor_buttons(button1))
|
||||||
led_pwm_down(led)
|
await asyncio.gather(pico_led_task, button_task)
|
||||||
led_state = True
|
|
||||||
|
asyncio.run(main_loop())
|
||||||
|
|||||||
Reference in New Issue
Block a user