Rubber Ducky

  • €69.99

World famous USB Keystroke Injection Device. What you could do in minutes, the Rubber Ducky does in milliseconds.

Abuse the trust that computers give to keyboards - at over 1000 words per minute.


The Hak5 Rubber Ducky is an automated USB-Keystroke Injection Platform. Pocket-sized, powerful and cross-platform, when plugged into a device, the Rubber Ducky emulates a keyboard and executes its payload, typing at over 1000 words per minute.

Whatever you could do via keyboard on a machine, the Rubber Ducky can do, but better, faster and covert.

Available with or without the official Hak5 Rubber Ducky Field Guide (50 pages) - perfect for hitting the ground running.

Platform Overview

Regardless of operating system (MacOS, Linux, Windows, Android) - all modern devices implement the notion of trusted devices - that is devices that a system will automatically trust and accept without the need for confirmation or drivers.

HID ("Human Input Devices") - Keyboards, Mice, etc are the cornerstone of this trust system. Across all platforms - Windows, MacOS, Linux, Android - devices have complete trust of keyboards.

The Rubber Ducky abuses this trust. By masquerading as a keyboard, it is able to deliver keystrokes at highspeed.

Payloads are completely customisable, and the Rubber Ducky is backed by the Hak5 Community - hundreds of payloads are available.

Although it is infinitely configurable, common use cases include:

Penetration Testing

Whatever you could do in front of a keyboard, the Rubber Ducky can do faster. Steal passwords. Establish RATs. Exfiltrate data. Install backdoors. Poison DNS.
If you've got access to an unlocked system, put the Rubber Ducky to work for you.

System Administration

Leverage Keystroke Injection to automate repetitive tasks. Log cleaning, forensics, system updates. Let the Rubber Ducky do the typing for you.

What's included

  • 1x Hak5 Rubber Ducky
  • 1x Quick-Start Guide
  • 1x Rubber Ducky

Technical Specifications

  • Weight: 15g
  • Dimensions: 50x20x9mm

  • Atmel 32bit AVR Microcontroller AT32UC3B1256

  • 1x RGB Indicator LED
  • 1x Programmable Push Button
  • 1x JTAG Interface
  • 1x MicroSD Card reader

Shipping & Packaging

  • Each Rubber Ducky is dispatched from Europe - no need to worry about slow shipping times, import duties or damaged goods.
  • Packed in a sturdy compact 85x130x45mm box.
  • We provide worldwide shipping with express options.

Rubber Ducky Technical Resources

Tutorials & Guides Community Resources

Compatible Systems

  • Windows: XP, 7, 8, 10 (All Versions)
  • OS/X: 10.0 - 10.7 (All Versions)
  • Linux: Debian, Ubuntu, CentOS, etc (All Versions)
  • Android: Requires USB / OTG Support

Rubber Ducky Introduction Video

15-Second Password Hack Video

Stealing Files with the Rubber Ducky Video


Where do you ship from?

All items are dispatched from our EU-based warehouse. You will receive a tracking number upon item dispatch. The address used on your purchase is printed as a label - please double check your address to avoid mistakes.

When will my order be dispatched?

Lab401 dispatches orders Monday - Friday.
All orders placed before 12PM GMT+1 will be dispatched the same day. All orders placed after this cutoff time will be dispatched the next business day.

For example:

  • An order placed Friday, 9AM GMT+1 will be dispatched the same day.
  • An order placed on Friday, 6PM GMT+1 will be dispatched Monday.
  • An order placed on Saturday will be dispatched Monday

For any questions, please contact customer support.

What shipping options are available?

We provide four types of shipping:

  • EU Standard Post
  • EU Express Post
  • International Standard Post
  • International Express Post

How are import duties / customs handled?

For all European Union destinations, all shipments are DDP - Delivered Duty Paid. This means all applicable VAT/TVA, shipping costs and customs fees are pre-paid. 
You will not be charged by the courier service / post office or customs.

For all destinations outside European Union, all shipments are DDU - Delivered Duty Unpaid. This means that your country's custom service impose a VAT/TVA/Import Duty on your shipment.

Please note - a purchase is an explicit agreement of our terms and conditions. Any products refused by clients will not be refunded.

Delivery Protection

Is my delivery protected?

For orders over 250 Euro, Lab401 automatically provides door to door delivery protection.

Lab401 Delivery Protection means we remain fully responsible for the package right up to delivery. If the package is lost or damaged, the package can be immediately resent upon receipt of proof.

For orders less than 250 Euro full responsibility for the package is transferred to you at the moment of shipping. Any claims for loss or damage must be addressed directly with the delivery agency.

Delivery Protection for orders under 250 Euro can be purchased at checkout easily and cheaply.