🦆 EvilDuck

A powerful, pocket-sized USB keystroke injector for security testing and education.

Overview

EvilDuck is a compact, open-source device designed to simulate human keyboard input at lightning speed. Inspired by the famous “USB Rubber Ducky,” EvilDuck gives cybersecurity enthusiasts, educators, and makers an affordable way to explore USB vulnerabilities, test defenses, and run custom payloads.

Why EvilDuck?

• Easy Payload Management – Hot-swappable micro-SD card support lets you load, store, and execute scripts instantly.

• Visual Feedback – Onboard LEDs keep you informed of status: no card, script missing, or successful injection.

• Compact Design – Slim USB form factor with integrated microcontroller and voltage regulation.

What You Can Do with EvilDuck

• Security Testing – Demonstrate and explore real-world USB attack vectors.

• Education – Teach students and professionals about keystroke injection and endpoint security.

• Automation – Use scripts to automate repetitive keyboard tasks instantly.

Who It’s For

• Ethical hackers & pentesters

• Security trainers and educators

• Makers & tinkerers curious about USB hardware

What’s Included

• Fully assembled EvilDuck device

• Pre-flashed firmware

• Light documentation to help you get started

Availability

EvilDuck is available in limited handmade batches. Each unit is tested before shipping.