Big thanks to Proton VPN for sponsoring this video. To get a 75% discount on Proton VPN this Black Friday month, please use the following link: https://protonvpn.com/davidbombal // Buy Hak5 coolness // Buy Hak5 stuff here: https://davidbombal.wiki/gethak5 Why does the USB Rubber Ducky look like a normal flash drive but behave like a keyboard? Darren Kitchen, founder of @hak5, tells David Bombal how a tool for fixing printers became a famous hacking device. @DarrenKitchen shares the story behind the USB Rubber Ducky, from hiding early circuit boards inside actual rubber ducks to building DuckyScript and developing a security tool used for automation, awareness training, and authorized red teaming. We explore why computers accept input from USB keyboards, how keystroke injection works, and why an apparently harmless device can issue commands much faster than a person. Darren also explains Keystroke Reflection, a technique that uses keyboard indicator signals such as Caps Lock, Num Lock, and Scroll Lock to transfer small amounts of data without relying on a normal network connection, when the host and access conditions permit it. In this conversation: • Why the Rubber Ducky originally helped Darren fix printers and network shares • How a USB device can identify itself as a human interface device (HID) • What DuckyScript does and how it evolved • The security implications of high-speed keystroke injection • How Keystroke Reflection works in principle, including air-gapped scenarios • Darren's stories about the Rubber Ducky appearing in television and film Learn more about the USB Rubber Ducky: https://shop.hak5.org/products/usb-rubber-ducky Hak5's explanation of Keystroke Reflection: https://shop.hak5.org/blogs/usb-rubber-ducky/keystroke-reflection What surprised you most: that it started as an IT shortcut, or the keyboard LED technique? Let us know in the comments. This interview discusses security research and authorized testing. Only use security tools on systems you own or are explicitly permitted to assess. // Darren Kitchen SOCIAL // YouTube: https://www.youtube.com/darrenkitchen Website: https://hak5.org/pages/hack-across-america X: https://x.com/hak5darren // Hak5 WEBSITE // https://davidbombal.wiki/gethak5 // David's SOCIAL // Discord: https://discord.com/invite/usKSyzb X: https://www.twitter.com/davidbombal Instagram: https://www.instagram.com/davidbombal LinkedIn: https://www.linkedin.com/in/davidbombal Facebook: https://www.facebook.com/davidbombal.co TikTok: http://tiktok.com/@davidbombal YouTube: https://www.youtube.com/@davidbombal Spotify: https://open.spotify.com/show/3f6k6gERfuriI96efWWLQQ SoundCloud: https://soundcloud.com/davidbombal Apple Podcast: https://podcasts.apple.com/us/podcast/david-bombal/id1466865532 // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com // MENU// 0:00 - Intro 0:30 - Hak5 Rubber Ducky origins 01:28 - What is a Rubber Ducky? 04:07 - Proton VPN sponsor segment 06:54 - How it works + origin story 12:03 - How the Rubber Ducky was created 13:40 - DuckyScript 17:48 - A powerful tool for automation 19:02 - Keyboard vulnerability // Rubber Ducky payload 23:58 - Rubber Ducky in media // Conclusion Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #USBRubberDucky #Hak5 #Cybersecurity