Make your own USB Rubber Ducky using a normal USB stick

Did you ever wanted to make your own USB Rubber Ducky?

duckme

Well now you can using a regular USB stick, i must start with mentioning that it can not be done with all the USB sticks you will need one with a specific Nand chipset on it.

More specific the Phison 2251-03 (2303)

So now you are probably wondering where do i get that specific usb stick then, and how do i know what chipset is on it?

On github there is a list with all know compatible devices, but most off them are not for sale anymore.

So what do i do then ?

Well you can buy one in my webshop šŸ™‚

So this is what u need to get started, and you will also need the following things:

FILE ONE:

  • The Zip file from github found here : LINK

duck1

FILE TWO:

  • Visual Studio 2012 ExpressĀ which can be downloaded here : LINK

duck2File THREE:

  • SDCC (Small Device C Compiler) which can be downloaded here : LINK

duck3

FILE FOUR:

  • Java Runtime Environment 7 which can be downloaded here : LINK

duck4

FILE FIVE:

  • Ā Duckencoder.jar which can be downloaded here : LINK

duck5

FILE SIX:

The Burner image and firmware for flashing the USB stick

Which can be download here : LINK

==============================================

Now that u downloaded all these files u are ready to install them!

Follow along with me for how to install all this properly

So we only need to install 3 things (cause other are just zip packages you will need).

Let’s begin with Microsoft Visual Studio Express 2012

Step One :

Go to the location where u downloaded the Visual Studio Express 2012 setup

Mine is in Downloads

so double click this icon where u saved it

duck6now follow along with the procedure shown below.

duck7

Now make sure u check the box I agree to the License terms and conditions

and click INSTALL

u should then see the following things pass by

duck8duck9duck10duck11duck12

and when it’s done u should see this

duck13u now need toĀ press the LAUNCH button to start Visual Studio Express

From the moment u pressed LAUNCH u should see this

duck14Click on the Register Online (Dont worry u will not need to pay anything cause this is a free version, but you must sign in using a existing e-mail address u have at Microsoft)

like shown here

duck15

So fill in the email address and password you have at Microsoft (aka hotmail.com, outlook.com,..etc)

and click Sign In

next u should see this

duck16

now when u see this the email address you signed in with should be automatically be filled in, i blanked out mine(for spam reason) but in the Dropdown menu where it’s asking Are you registering Visual Studio for Academic, Business or Personal use? u should choose Personal

And where it’s asking Are you creating software for public distribution, online use by others or private use? u should choose Private Use

Once u did all this Click on Continue

U should now get this

duck17

Your Product Key for activating the Visual Studio Express 2012

So copy the Product Key and go back to the pop-up u started with

duck18

And paste the Product Key in the field and Click Next

when u did this and everything is fine u should get this

duck19

so click Close

and next u will end upĀ in Visual Studio Express 2012

duck20

since we don’t need it right away u can close the program for now.

Step Two :

Next we are going to installĀ SDCC (Small Device C Compiler)

so double click this icon where u download it to mine is again also under Downloads

duck21

 

now follow along with the pictures below

duck22

duck23

duck24

duck25

Now the next step is Very Important!Ā 

U should make sure u are installing it toĀ C:\Program Files\SDCC

duck26

after u clicked Install u should see it installing like shown here below

duck27

And followed by this

duck28

So now click Next

duck29

And click Finish

U are now done with installingĀ SDCC (Small Device C Compiler)

Step Three :

We are now going to installĀ Java Runtime Environment 8

well be needing this to run Duckencoder.jar

Now again go to the location where u saved the installer and double click this icon

duck30

and follow along with the pictures below

duck31

when u see this click Install

duck32

and yes it’s true 3 Billion Devices Run Java maybe even your microwave šŸ™‚

when the setup process is complete u should get this

duck33

So now that it’s done click Close

Setting things up:

Unpacking the Psychson-master.zip u downloaded from github (so FILE ONE)

duck34

So browse to the location where u downloaded it to, mine again is in Downloads

And now where u see this icon right click on it and select Extract Here like shown here below

duck35

Now that u did this u should get the Folder Psychson-master in the location where u started from so in my case C:\Users\Pentestlab\Downloads>duck36

Now that u have this folder we should copy it to another location.

I highly suggest you do exactly the same as i do so that afterwards u can download my help file with the commands in it.

So now right click on the folder Psychson-master and select copy like shown here

duck37

Now that u copied the file Open My Computer and go to your C:\Ā 

And create a new folder called fw (all in lowercase)

like shown below:

duck38

Now open that folder fw that u just created and paste theĀ Psychson-master folder inside!

duck39

u should then have the folderĀ Psychson-masterĀ inside the folder c:\fw\

like shown here

duck40

So now that u pasted the folder Psychson-master here where going to place all the other files we need here under c:\fw

since you are now in the folder c:\fw right click here and create a new folder called fw_bn

like shown here

duck41

now create another folder called ducky like shown here

ducky42

now on top u downloaded file six and it is namedĀ firmware_ps2251-03.rar

it should be in your Downloads folder at this time, but we need to place it in the fw_bn folder and extract it there

so copy theĀ firmware_ps2251-03.rarĀ file from your Downloads folder like shown below

ducky43

and paste it under c:\fw\fw_bn

like shown here

duck44

And now that u pasted the file firmware_ps2251-03.rar here under c:\fw\fw_bn u should extract it here

like shown here

duck45

u should then have this

duck46

But now we need to get some files out off this folder and copy it to this location c:\fw\fw_bn

So open the folder Firmware PS2251-03 like shown here below and copy the files Ā BN03V104M.BIN andĀ FW03FF01V10753M_20130621.BIN

like shown here

duck47

So now that u copied these files go back one folder so to the folder c:\fw\fw_bn and paste these 2 files here

so like this

duck48

u should then have this

duck49

The files BN03V104M.BIN and FW03FF01V10753M_20130621.BIN under c:\fw\fw_bn

Now that this is done u should move on to the next step

The next step is copying the file duckencoder.jar to c:\fw\ducky

So go to the location where u saved duckencoder.jar my is still under Downloads so i need to copy it

like shown here

duck50

now that u copied this file we should move it to c:\fw\ducky

so go to the location c:\fw\ducky and paste the file duckencoder.jar hereĀ 

like shown here

duck51

u should then have this

duck52

the file duckencoder.jar in the folder c:\fw\ducky

so you should now have the folders ducky, fw_bn and Psychson-master in c:\fw

like shown here

duck53

So listed out for u once more

duckencoder.jar (file five on top) under c:\fw\ducky

BN03V104M.BIN andĀ FW03FF01V10753M_20130621.BIN (file six on top) under c:\fw\fw_bn

and the extracted github zip file (file one on top) under c:\fw (the folder in the zipfile from github is already called Psychson-master) so make sure u don’t have this folders double!

Now we are ready with putting all the files in place!

COMPILINGĀ ALL THE THINGS

So the next step is to compile all the stuff

So go to c:\fw\Psychson-master\DriveCom

and open the fileĀ DriveCom.sln

like shown here

duck54

So you should just double click on DriveCom.sln

and get this

duck55

now that u see this u should click in the top bar on Start

like shown here

duck56

Once u clicked on start u should see this

duck57

Now that u see this u should Close the window where it says “No action specified, entering console” First

like shown here

duck58

after u closed the command prompt window u should close the Visual Studio

like shown here

duck59

Now go to c:\fw\Psychson-master\Injector

like seen here

duck60

And double click on Injector.sln to open it in Visual Studio Express

u should then see this

duck61

again now that u see this u should click in the top bar on Start

like shown here

duck62

now once you clicked start u should get this

duck63

you should see some text in Output

so next close Visual Studio again

like shown here

duck64

So once you clicked the close button we should now go to following location

c:\fw\Psychson-master\EmbedPayload

and open the fileĀ EmbedPayload.sln

like shown here

duck65

Ā Now once you double clicked this file u should see this

duck66

now that u see this u should click in the top bar on Start

like shown here

duck67

Once you did click in start you should again see some output text below

like seen here

duck68now that this is done close Visual Studio again like shown here

duck69

Now all the compiling is done so let’s get one more thing we need to make it complete

the thing we need is a script for putting on the self made USB rubber ducky

we will be getting the Hello world script from the github

so go to to this website : LINK

you will then see this

duck70

So as you see in the picture u now need to click on the link to Payload – Hello World

u will then come to this page

duck71

so as you see in the picture we need to select all the text marked in blue and then right click and choose Copy

Now that u copied this text we need to go to the following location

c:\fw\ducky

and create a new text fileĀ 

like shown here

duck72

And name the file HelloWorld.txt

like shown here

duck73

now that u created the text file HelloWorld.txt under c:\fw\ducky

open it by double clicking on itĀ 

and then we need to paste the code we copied from the github page inside the HelloWorld.txt

so in the empty document right click and choose Paste

and you should then have this

duck74

Now that the code is inside we need to save it

duck75

and close it like seen here below

duck76

So now that this is done we can start playing with the stick

First we are going to check if the stick really has theĀ Phison 2251-03 (2303) chipset

we can check this by downloading the software calledĀ GetFlashInfo

get it from this LINK

when downloaded go to the location u saved it to mine is standard in Downloads

u should there see the zip file u downloaded

duck77

now right click on this and choose Extract here

like shown here
duck78

u should then open the folder namedĀ usbflashinfo

duck79

so double click on this folder and you should then see these filesĀ 

duck80

So now Insert your USB stick and double click on GetFlashInfo.exe

u should then see this

duck81u should get this back as response

duck82

It’s very important that u get Phison 2303 (2251-03) as Controller

Normally if you bought a USB stick from my webshop it should be fine!

So now that we now for sure that the stick u have has the right nand chipset we can start making the USB Rubber Ducky

so first download this file i created with all the commands u will need for making the USB Rubber Ducky

from this LINK

For convenient work save the file under c:\fwĀ 

so you should now have this file like shown here

duck83

So now that u have my commandsguide.txt file double click on it and you should see this

duck84

So now leave the text file open and click on START and type cmd and then right click on Command Prompt and choose Run as Administrator

like shown here

duck85

you should then get this

duck86

So now go back to the text file u downloaded from my LINKĀ (commandguide.txt)Ā and copy the first line like shown here

duck87

Now that u copied the first line go back to the command prompt and right click and chooseĀ pasteĀ like shown here

duck88

u should then get this

duck89

when u pasted this press ENTER

and you should then see this

duck90

a new line and no errors if you see error on line 1 you should check the file HelloWorld.txt maybe it’s still empty

so now the command u just ran converted the HelloWorld.txt to a inject.bin using the duckencode.jar

Next we need to make a firmware file

so go toĀ C:\fw\Psychson-master\firmware

and you should see the files like shown here

duck91

So now that u are in this folder u should double click on build.bat

like shown here

duck92

u should see some thing happening in a command prompt and then it automatically closes, but afterwards you should now see a bin folder in this location

like shown here

duck93

So next step we go back to the text file u downloaded from my website and we are going to copy the second line

like shown here

duck94

Now that u copied this

go back to the command prompt and paste it there (if you closed the cmd, be sure u run it again as Administrator)

like shown here

duck95

Ā u should then get this

duck96

Now that u pasted the second line in the Command Prompt u should press ENTER

and whenĀ successfully you should see it print out File updated

like shown here

duck97

Now that this is done re-insert you USB stick

crop1

crop2

Now that the stick is your USB port open My computerĀ and check what drive letter the USB Stick has.

like shown here

duck98

So make sure u remember the drive letter that has been assigned to your USB Stick!

So now go back to the text file u got from my website and copy the line underĀ SET USB STICK IN BOOTMODE

like shown here

duck99

Like seen in the picture make sure that u change the drive letter to yours!

so where /drive=G is change the G to the drive letter that has been assigned to your USB Stick!

Now that u copied this line switch back to the Command Prompt and paste it there

like shown here

duck100

when u clicked paste u should get this

duck101

When u did this u can press ENTERĀ 

and u should then get this

duck102

Also if you removed theĀ casingĀ around the USB Stick u bought from my webshop u should see that the blue led stays on

So now that the USB Stick is in BootModeĀ 

Go back to the text file and copy the line underĀ SET ACTION TO SEND EXECUTABLE USING BURNER IMAGE

like shown here

duck103

So now that u copied this line switch back to the Command Prompt and paste it there

like shown here

duck104

again when u clicked pasteĀ 

u should get this

duck105

Now that the line is pasted u can press ENTER

and you should then see this

duck106

Now that this is done switch back to the text fileĀ 

and copy the line underĀ DUMP THE ORIGINAL FIRMWARE

like shown here

duck107

Now that u copied this line switch back to the Command Prompt and paste it there

like shown here

duck108

Now when u clicked paste you should see this

duck109

Now when u pasted it you can press ENTER

and should see this

duck110

Now that this is done switch one more time back to the text file and copy the line

underĀ SEND PAYLOAD TO FIRMWARE

like shown here

duck111

now that u copied this line switch back to the Command Prompt and paste it there

like shown here

duck112

Now when u clicked paste you should get this

duck113

Now that it’s pasted u can press ENTER

and you should see this

duck114

You now just flashed your own USB Rubber Ducky using a regular USB Stick šŸ™‚

135 Responses to “Make your own USB Rubber Ducky using a normal USB stick”

  1. Michael April 22, 2015 at 10:32 pm Permalink

    Thanks for this tutorial. The hello world script work but how could i change the script.

    • pentestshop April 24, 2015 at 11:20 pm Permalink

      U will need to flash the USB-stick back to stock first, you do this by using a tool from the flash vendor.
      Sadly i cant specific tell which one since i don’t know on what USB-stick u did this? So what is the vendor? Corsair,Kingston,Patriot,..?
      But u also need to shorten the pins first before u can do this, shortening the pins set it’s back in flash mode. Its pin 2 and 3 on the Phison 2251-03 chip

      • Michael April 25, 2015 at 8:58 pm Permalink

        I use the Corsair Voyager LS .

  2. WhiteRabbit May 7, 2015 at 10:41 pm Permalink

    This is great, really good work, excellent explanation, i got the Kingston Digital 8GB USB 3.0 DataTraveler (DT100G3/8GB), if i want to add a different payload, i need to flash it back to stock and re do all process again? isnt there another way to do it? thanks!

  3. Single Core May 17, 2015 at 8:43 pm Permalink

    Awesome, it works. But now I have the problem of flashing another script. I would like to restore the original firmware as mentioned above but I used this ghetto USB drive which has the correct controller. But I can’t seem to find a tool to revert the software. Any input would be appreciated.

  4. SomeOne June 7, 2015 at 11:13 am Permalink

    Hi, thank you for the detailed Manual, but i got still one (for me very important) question.

    I got several USB-Sticks with the Phison 2303 (2251-03) Controller, most of them are:
    Manufacturer: TOSHIBA
    Product: TransMemory Mx

    Do i also have to take the two files “BN03V104M.BIN and FW03FF01V10753M_20130621.BIN”
    or should i take other files cause i don’t have the same Stick u use ???

    You wrote:”So open the folder Firmware PS2251-03 like shown here below and copy the files BN03V104M.BIN and FW03FF01V10753M_20130621.BIN”

    I’m afraid of “damaging” the stick…. hope you can help me!!!!

    ——————————————————————————
    Detailed Information of the Stick using FlashDriveInfoExtractor:
    Volume: J:
    Controller: Phison 2303 (2251-03)
    Possible Memory Chip(s):
    Toshiba TH58NVG8T2JTA20
    Toshiba TH58TEG8T2JTA20
    Toshiba TC58NVG7T2JTA00
    Toshiba TC58TEG7T2JTA00
    Memory Type: TLC
    Flash ID: 983AA892 7657
    Chip F/W: 02.08.53
    Firmware Date: 2014-01-02
    ID_BLK Ver.: 1.2.65.0
    MP Ver.: MPALL v3.29.0C
    VID: 0930
    PID: 6545
    Manufacturer: TOSHIBA
    Product: TransMemory Mx
    Query Vendor ID: TOSHIBA
    Query Product ID: TransMemory Mx
    Query Product Revision: PMAP
    Physical Disk Capacity: 31212699648 Bytes
    Windows Disk Capacity: 31191793664 Bytes
    Internal Tags: 2Q6P-S74J
    File System: FAT32
    Relative Offset: 4032 KB
    USB Version: 3.00 in 2.00 port
    Declared Power: 300 mA
    ContMeas ID: 76B0-02-00
    Microsoft Windows 7 SP1 x64

    • pentestshop June 7, 2015 at 12:25 pm Permalink

      Yes you must use the files BN03V104M.BIN and FW03FF01V10753M_20130621.BIN, it doesn’t matter if u have USB sticks from another manufacture then corsair as long as it is the Phison 2303 (2251-03) Controller your good to go! Also if you want to recover the USB Stick back to stock u can use my other guide http://www.pentestingshop.com/recover-a-usb-stick/
      And thanks for the comment.
      Good Luck using your ducky šŸ™‚

      • SomeOne June 8, 2015 at 3:45 pm Permalink

        Thank you for the fast response… finally my “RubberDucky” worked šŸ™‚
        But now i have the next Problem

        I made only a TestScript.txt (inject.bin) to see if it works… and it did, after i made the “Real Script”…
        now i have only Problems…
        it’s not possible for me to inject the new Script (inject.bin)… so i read your Manual how to reset the USB-Stick -> http://www.pentestingshop.com/recover-a-usb-stick/

        I guess i have to do that everytime when i want “upload” a new script “inject.bin” to the USB-Stick…

        But i was too lazy to open the USB-Stick-Case… so i plugged the Stick in… wait until the Script has finished… the i set the Stick with CMD in BootMode (C:\fw\Psychson-master\tools\DriveCom.exe /drive=F /action=SetBootMode)

        Then i started up “MPALL_F1_9000_v371_0A.exe”… then i clicked on Update, and it showed my Stick..
        after that i created the settings exactly like you showed in your Manual…
        (burner from C:\fw\fw_bn\BN03V104M.BIN)
        (firmware from C:\fw\fw_bn\FW03FF01V10753M_20130621.BIN)

        after that… i clicked on Start in “MPALL_F1_9000_v371_0A”

        the LED of the Stick started Flashing all the time… after a while… it stopped blinking and the LED was ON all the Time, but the MPALL_F1_9000_v371_0A stopped working… nothing happend…

        I waited about one Hour… but nothing goes on….

        So i plugged out the Stick, made a restart… then i read a lot of Comments and so on… OK.. i had to open the USB-Stick Case

        It’s a Toshiba TransMemory-MX 32GB… like on this Picture (https://cloud.githubusercontent.com/assets/9211112/4736506/0379b7bc-59ed-11e4-8bf6-c38cdf7b0d54.jpg)
        So i connected the two Pins together and put it in the USB-Drive… nothing happens.. no DriveLetter… no USB-Device… nothing…
        When i update in MPALL_F1_9000_v371_0A… nothing happens… no USB-Drive… nothing…

        When i set it to BootMode over CMD… it workes… i can see the Stick in “MPALL” (but it tells me it only has 16GB, but it has 32), but when i try to Reset the Drive… it has Errors all the time…

        now… my Stick won’t start the Ducky-Script… AND i can’t use it anymore…

        Does anyone has an Idea what i can/try now…. (Throwing the Stick away is not what i wanna hear šŸ™‚

        • pentestshop June 8, 2015 at 6:30 pm Permalink

          i am glad to hear that flashing a ducky script worked out for you, and indeed for flashing another script u always need to reflash it back to original first. But about the problem u have with reflashing it back to stock seems strange! The only thing i think that can be the problem is that u have not the Phison chip but a Toshiba chip, isn’t there another chip on it on the other side?.. And did you keep shortening the pins while plugging in the USB Stick?

    • arnold April 25, 2017 at 3:07 pm Permalink

      i have the same Error with the Corsair Memory CMFLS3-32GB Voyager LS. When i plug the USB inside Windows 10 has the same error in the Dervice manager.

  5. google advertising tools August 1, 2015 at 2:25 pm Permalink

    Does your blog have a contact page? I’m having a tough
    time locating it but, I’d like to shoot you an e-mail.
    I’ve got some creative ideas for your blog you might be interested in hearing.

    Either way, great site and I look forward to seeing it expand over time.

  6. C7330 August 7, 2015 at 11:52 pm Permalink

    Thank you for both the flash and restore guides…After a little bit of tinkering I got it to work…However, for some reason that I haven’t yet been able to figure out, my script only appears when inserted into a 2.0 usb port…I’m just wondering if this is a common issue or a problem with my firmware that I flashed?..The usb is a SanDisk Ultra 3.0 32gb with the proper Phison chip…I’m still playing around with it but any guidance is both welcomed and appreciated…Thanks again.

  7. google plus account for business August 8, 2015 at 11:27 am Permalink

    Hi there, I believe your web site might be having browser compatibility problems.

    When I look at your website in Safari, it looks fine however when opening in I.E.,
    it has some overlapping issues. I simply wanted to give you
    a quick heads up! Besides that, great site!

  8. Deanne August 23, 2015 at 4:58 pm Permalink

    Nice response in return of this question with genuine arguments and
    explaining everything about that.

  9. boy September 1, 2015 at 3:07 am Permalink

    very cool, awesome

  10. Good BOy September 6, 2015 at 12:21 am Permalink

    Volume: E:
    Controller: Alcor AU6989SN-GT/AU6998SN-GT
    Possible Memory Chip(s):
    SanDisk SDTNQCAMA-016Gx2
    SanDisk SDTNQCAMA-016G *2
    Memory Type: TLC
    Flash ID: 454CA892 7657
    Flash CE: 2
    Flash Channels: Single
    Chip Code: 0xE512
    Chip F/W: D82B
    Group: 98
    VID: 8564
    PID: 1000
    Manufacturer: JetFlash
    Product: Mass Storage Device
    Query Vendor ID: JetFlash
    Query Product ID: Transcend 32GB
    Query Product Revision: 8.07
    Physical Disk Capacity: 31299993600 Bytes
    Windows Disk Capacity: 31299989504 Bytes
    Internal Tags: AZWR-S872
    File System: NTFS
    USB Version: 2.00
    Declared Power: 200 mA
    ContMeas ID: AFA3-04-00
    Microsoft Windows 7 SP1 x64 Build 7601
    ————————————
    http://www.antspec.com/usbflashinfo/
    Program Version: 8.4.0.584

    can I use it?

    • pentestshop September 15, 2015 at 6:12 pm Permalink

      no u can not use that USB Stick only the Phison 2303 (2251-03) Controller

  11. Helping boy September 6, 2015 at 1:14 am Permalink

    Microsoft Windows [Version 6.3.9600]
    (c) 2013 Microsoft Corporation. All rights reserved.

    C:\Windows\system32>java -jar c:\fw\ducky\duckencode.jar -i c:\fw\ducky\HelloWor
    ld.txt -o c:\fw\ducky\inject.bin
    Error on Line: 1

    C:\Windows\system32>java -jar c:\fw\ducky\duckencode.jar -i c:\fw\ducky\HelloWor
    ld.txt -o c:\fw\ducky\inject.bin
    Error with input file!
    Exception in thread “main” java.lang.reflect.InvocationTargetException
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
    at java.lang.reflect.Method.invoke(Unknown Source)
    at org.eclipse.jdt.internal.jarinjarloader.JarRsrcLoader.main(JarRsrcLoa
    der.java:58)
    Caused by: java.lang.NullPointerException
    at Encoder.main(Encoder.java:111)
    … 5 more

    C:\Windows\system32>

    How can I solve this problem ??

    And I use
    Volume: E:
    Controller: SanDisk
    Possible Memory Chip(s): Not available
    VID: 0781
    PID: 5576
    Manufacturer: SanDisk
    Product: Firebird USB Flash Drive
    Query Vendor ID: SanDisk
    Query Product ID: Cruzer Facet
    Query Product Revision: 1.26
    Physical Disk Capacity: 8004304896 Bytes
    Windows Disk Capacity: 8004300800 Bytes
    Internal Tags: 3Z4F-8CH3
    File System: NTFS
    USB Version: 2.00
    Declared Power: 200 mA
    ContMeas ID: 9509-01-00
    Microsoft Windows 8.1 x64 Build 9600
    ————————————
    http://www.antspec.com/usbflashinfo/
    Program Version: 8.4.0.584

    (+ I checked your shop but , that is stock now )

    • pentestshop September 15, 2015 at 6:26 pm Permalink

      Did you run Command Prompt as a Administrator? And did you download the right java version?
      Also check this line java -jar c:\fw\ducky\duckencode.jar -i c:\fw\ducky\HelloWor
      ld.txt -o c:\fw\ducky\inject.bin (That u have the right filename, so that the file c:\fw\ducky\HelloWorld.txt is really HelloWorld with a capitalized H and W.)

  12. Sofia September 26, 2015 at 5:02 am Permalink

    I can use:

    Volume: F:
    Controller: Phison 2251-60
    Possible Memory Chip(s):
    Toshiba TC58NVG5T7FLA19
    Memory Type: TLC
    Flash ID: 98D79882 7655
    Chip F/W: 02.0A.53
    Firmware Date: 2010-12-09
    MP Ver.: MPALL v3.13.0B
    VID: 0930
    PID: 6545
    Manufacturer: Kingston
    Product: DT 101 G2
    Query Vendor ID: Kingston
    Query Product ID: DT 101 G2
    Query Product Revision: PMAP
    Physical Disk Capacity: 3926949888 Bytes
    Windows Disk Capacity: 2058338304 Bytes
    Internal Tags: 2Q6P-S74Q
    File System: FAT32
    Relative Offset: 16 KB
    USB Version: 2.00
    Declared Power: 200 mA
    ContMeas ID: 0629-05-00
    Microsoft Windows 7 Build 7600
    ————————————
    http://www.antspec.com/usbflashinfo/
    Program Version: 8.4.0.585

  13. Rex October 21, 2015 at 5:25 pm Permalink

    Will the Twin Duck firmware work on bad usb for using it as a memory as well as a keystroke injection tool for like this payload
    https://forums.hak5.org/index.php?/topic/29002-payload-wi-fi-password-stealer-saving-to-sd/

  14. Omar November 21, 2015 at 10:08 pm Permalink

    Build.bat
    “sdcc” is not recognized as an internal or external command, operable program or batch file”

    These problems turns out why?

    My files here
    C:\fw\Psychson-master\firmware
    C:\Program Files\SDCC

    • pentestshop November 22, 2015 at 10:42 am Permalink

      Make sure all the files are in the exact same place as in my tutorial, and also check if this is checked at the end of the installation of SDCC also if you already did run build.bat and there is a Bin directory in the folder u should remove the Bin folder and run it again..And try to run build.bat as an Administrator, so right click on the file and select Run as Administrator. Do this for all the command prompts u open..Hope u can get this solved

      • JoĆ£o July 28, 2016 at 11:13 am Permalink

        I have the same problem and I can’t resolve it.

        Pls help me

  15. Omar November 24, 2015 at 9:14 am Permalink

    *** Building main.c…
    ‘C:\Program’ is not recognized as an internal or external command,
    operable program or batch file.
    at 1: warning 190: ISO C forbids an empty source file
    *** There were errors! ***
    *** Done.

    Why Noooo :/ I did what you say but I can not

  16. arslan December 31, 2015 at 9:04 am Permalink

    Very Good Tutorial, I have aa Problum, i have make my usb as per show you in tutorial . And i Dn’t face any problum or any error during making rubber USB. but after complete when i unplugged and plug again its can not show any thing. or not showing in my PC.

    • pentestshop December 31, 2015 at 10:47 am Permalink

      Did you use a Corsair stick like i did? And if so first try to recover the USB Stick back to normal like shown here Recover USB Stick and then start back from this step Compiling Done and check if u made the HelloWorld.txt correct using the duckencoder

      • arslan December 31, 2015 at 7:58 pm Permalink

        Yes i have same USB that you have. but just color difference you have black USB and i have White USB. And i have perform every singel step like you perform. Now m trying to recover but its nothing showing in this software , I have connect my USB with Port but in Recovery software nothing shows my USB. But in Recovery artical you mention there “Short Pin” . I do not know how to Shortpin. And which pins i should short?

        • pentestshop January 1, 2016 at 7:10 pm Permalink

          You indeed need to short the pins like shown on the picture Short pins it is the second and third pin from the corner like shown on the picture..You best let the recover software open and keep the pins shorted for a wile while plugging it in..U should then see the usb stick appearing in the software..Hope this helps u

          • arslan January 1, 2016 at 11:25 pm Permalink

            During the shot pin i have break this pin. and that time its shows in software, and m trying to format but its stop and now after breaking pin its show error “Driver : D: Mode 255 ID Error 0001”

          • pentestshop January 1, 2016 at 11:28 pm Permalink

            What do you mean with u have broke the pin? On the USB stick ? And i never had that error before..The format could take some time, but normally afterwards when u replug the USB Stick it should be back normal.

          • arslan January 3, 2016 at 2:05 am Permalink

            Yes, i have break pin no 2. when i trying shorting pins by mistake. and when i applying format it takes too much time and i unplugged. after re plug its shows error like that
            “Driver : D: Mode 255 ID Error 0001ā€

  17. arslan January 1, 2016 at 2:58 am Permalink

    And when i open software for Recovery its does not showing any thing. But when i click on Update its generate QC.ini file which write below,
    [PenDriveMP]
    IC Type=PS2251-03
    [Parameter Mark]
    Parameter Type=F1_MP_21
    [Customize Info]
    USB VID=0x13FE
    USB PID=0x5200
    String Product Name=USB DISK 3.0
    String Manufacturer Name=Toshiba
    Inquiry Version=PMAP
    [Configuration]
    Reset Serial Number=0
    Partition Boundary MB=999999999
    [TestItemOption]
    Do Preformat Test=1
    [Extra]
    Mode=3
    [Misc]
    Privacy Volume Label=USB DISK
    Wafer Erase All=1
    set1667=0x00
    [Advance]
    FC1=0xFF
    FC2=0x01
    CheckUSBConnectorType=0x22
    [Firmware]
    ISP=1
    Burner File=BN03V104M.BIN
    Firmware Name=FW03FF01V10053M.BIN

    • pentestshop January 1, 2016 at 7:12 pm Permalink

      This is normal,just do what i just told u..Shorten then pins while pluggin it in..It is not that easy to do, but after a couple off tries it should go.

  18. arslan January 3, 2016 at 8:04 am Permalink

    you can here my error

    here is mmy usb that i had broke a pin

  19. arslan January 3, 2016 at 8:05 am Permalink

    • pentestshop January 3, 2016 at 9:12 pm Permalink

      from what i see here on the picture it is not the same chip as i have, u told me u had the same stick as mine only in white..But if i look close at your picture is see that on your chip it says TOSHIBA .. That’s why u cant recover the stick with my software..U will need the recover software for your stick..I can maybe help if you give me all the things that are written on the Toshiba chip..

  20. Arslan January 4, 2016 at 5:12 am Permalink

    Yes dear yesterday i had buy new one usb suchas i buy before. I have uploaded pic. Now i follow your manual tutorial download all software and i create as create you. No error face during installation its same like your tutorial. But when i unplugged and replug its nothing shows. And after that i checked my system driver its shows yellow mark and not installed when m trying to install its shows me error.

    This is my USB

    And thats Driver error, You can see below

    And when m trying to upload/ or reinstall its gives me error. see below

    • pentestshop January 4, 2016 at 2:50 pm Permalink

      Try this please …

      To restore your Toshiba USB Stick to a flash disk you can do the following steps:
      1. Bring it Into Boot Mode
      2. Download and extract: MPALL_v3.63_0D
      3. Create QC.ini with following content:
      [PenDriveMP]
      IC Type=PS2251-03
      [Parameter Mark]
      Parameter Type=F1_MP_21
      [Customize Info]
      USB VID=0x13FE
      USB PID=0x5200
      String Product Name=USB DISK 3.0
      String Manufacturer Name=Toshiba
      Inquiry Version=PMAP
      [Configuration]
      Reset Serial Number=0
      Partition Boundary MB=999999999
      [TestItemOption]
      Do Preformat Test=1
      [Extra]
      Mode=3
      [Misc]
      Privacy Volume Label=USB DISK
      Wafer Erase All=1
      set1667=0x00
      [Advance]
      FC1=0xFF
      FC2=0x01
      CheckUSBConnectorType=0x22
      [Firmware]
      ISP=1
      Burner File=BN03V101.BIN
      Firmware Name=FW03FF01V10053M.BIN
      4. Start: MPALL_F2_v363_0D.exe -> Click on Start
      5. Unplug the stick after finishing
      6. Mode 3 will use the complete storage (Windows will see only a few MB Storage on the first partition of the stick. I used cfdisk from ubuntu to erase the first partition and create one big partition. You can also use the Windows Tool: Restore-v3.13.0.0.rar to restore the storage. After that you can format it with windows.)
      7. Now you have a brand new Flash Stick with 14,44 GB Memory free šŸ™‚

      stick

  21. Arslan January 4, 2016 at 7:05 pm Permalink

    YES dear i have checked it. But it can not give me permission for modifation. When i pluggin its give me error that i have mention already. I think its have no solution because it’s pin break. But i have Buy another USB but it’s also still not work. I have windows 10 and i checked 2 laptops both are giving me same error. Driver not installed. Your USB work on Windows 10?

    • pentestshop January 5, 2016 at 3:54 pm Permalink

      Yes my Usb stick works under Windows 10, but it’s also another stick then the one u use!..I tried looking for the fault u got but cant same to find the right solution..I would like to help to get your usb stick working again, but since i don’t own that kind off usb stick that u use i cant try it for myself..But maybe you can find the right solution here LINK

  22. mario January 6, 2016 at 12:26 am Permalink

    hola mi pregunta es donde se guardaran todas la informacion que se puedan conseguir

    • pentestshop January 6, 2016 at 12:03 pm Permalink

      no puedes guardarlo en una memoria USB , pero u puede guardarlo a distancia ..
      Lo siento por la mala traducciĆ³n

  23. Arslan January 6, 2016 at 5:45 am Permalink

    Which USB that work under windows 10, But afterall My Payload hello world works on windows7 perfectly. And now I am able to remove payload and get back orignal USB. Thank Dear of all things.
    1 thing i wana ask you, can we put exe with payload , for example if we put usb then exe will run.?

    • pentestshop January 6, 2016 at 11:59 am Permalink


      This USB Stick works for sure under Windows 10
      And i am glad u finally got it all working.
      The question about if you can put a exe payload on to the USB Stick is NO.
      But it’s much better to put a powershell exploit onto the BadUSB
      You can then make a powershell script to download your exe from somewhere.
      But most virus scanners or anti-malware software will block that, unless you first set a script to disable it all
      look here for the powershell script
      LINK

  24. Arslan January 6, 2016 at 11:19 pm Permalink

    Thank You, But i am not understand how to do that, There on 3 Different scripts i do not know which is better one. I do not know how to use it, i have seen many videos about using Powershell script, But They shows some different methods, If You have a time can you please make video about Powershell Script, Or How to Use Powershell Script in Rubber Ducky.
    Thanks

    • pentestshop January 11, 2016 at 12:46 am Permalink

      No problem, and i will sure keep it in mind to make a video some day.
      But i am very busy now working on the launch off the new OsmocomBB guides.
      And planning on selling those phones

  25. blackornish March 30, 2016 at 3:57 pm Permalink

    hello, i want to buy this one.
    How can I buy this USB?
    Please send an email to me.

    blackornish@gmail.com

    • pentestshop March 30, 2016 at 4:01 pm Permalink

      Sorry,the usb stick is currently not available,im looking for some new supported sticks since u cant buy the corsair anymore.

  26. Datalife April 21, 2016 at 3:45 pm Permalink

    hi guys , i have a some questions , but , every time I want to send the payload in the ducky usb , I must to recover a usb stick?????????

  27. Datalife April 21, 2016 at 3:52 pm Permalink

    hi guys , i have a some questions , but , every time I want to send the payload in the ducky usb , I must to recover a usb stick?

    • pentestshop April 21, 2016 at 6:47 pm Permalink

      Yes u indeed always need to flash it back to stock,with a real usb rubber ducky u have a micro sd card slot where you can put your payloads on to change them..But since this is a normal USB Stick u need to do it manualy.

      • Dj October 13, 2016 at 1:58 am Permalink

        Worth buying one for this reason alone. I wish I saw this before I went through the entire process for a stupid HelloWorld file!! I would have put all the payloads on the USB I thought were cool right off the bat!

  28. dak47 May 2, 2016 at 6:18 am Permalink

    Under “C: \ fw \ Psychson-master \ tools” I created “DriveCom.exe”, “EmbedPayload.exe” and “Injector.exe”.

    I created also “C: \ fw \ Psyschson-master \ firmware \ bin \ bn.bin”

    Next, I secured the firmware from a USB stick and injected in this my “Hello World inject.bin”

    After that I wanted to copy the infected firmware back on the stick, but I get an error every time after I added the stick in the boot mode,
    so that it is not possible for me to use the custom firmware.

    Terminal says:

    C:\Windows\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=F /action=SetBootMode
    Action specified: SetBootMode

    C:\Windows\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=F /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN
    Action specified: SendExecutable
    FATAL: System.InvalidOperationException: Header not accepted
    bei DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:Zeile 256.
    bei DriveCom.PhisonDevice.TransferFile(Byte[] data) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:Zeile 238.
    bei DriveCom.Startup._ExecuteImage(String fileName) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:Zeile 403.
    bei DriveCom.Startup.Main(String[] args) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:Zeile 109.

    C:\Windows\system32>

    ……so help would be nice!

    • pentestshop June 18, 2016 at 5:25 pm Permalink

      Try unplugging and entering boot mode again. It is possible to enter boot mode by shorting the pins yet disrupting future communication with the NAND chip, and it looks like that may be what happened here.

      • dpfamily June 19, 2016 at 9:10 am Permalink

        I have the exact Same problem I foolowed the instructions and i was able to copy paste and execute the first 3 command lines but i got the same errors as “dak47” when i am tried
        “c:\fw\Psychson-master\tools\DriveCom.exe /drive=E /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN” i get the same errors as “dak47” I havent tried to shorten the pins. Anyother solution? thank you so much for this great guide you have done a great job.

    • dpfamily June 19, 2016 at 9:12 am Permalink

      any lack with your problem? i have the same problem!

    • sfsfdf August 5, 2016 at 2:39 pm Permalink

      mee too

    • Thomas January 19, 2017 at 12:40 am Permalink

      I am haveing trouble with the final step does anyone know how to resolve this?

      C:\Users\Thomas>c:\fw\Psychson-master\tools\DriveCom.exe /drive=D /action=SendFirmware /burner=c:\fw\fw_bn\BN03V104M.BIN /firmware=c:\fw\Psychson-master\firmware\bin\fw.bin
      Action specified: SendFirmware
      Gathering information…
      Reported chip type: 2302
      Reported chip ID: 2C-A4-E5-3C-A5-00
      Reported firmware version: 1.01.10
      Mode: Burner
      Rebooting…
      Sending firmware…
      FATAL: System.InvalidOperationException: Header not accepted
      at DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) in C:\fw\Psychson-master\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 256
      at DriveCom.Startup._RunFirmware(String fileName) in C:\fw\Psychson-master\Psychson-master\DriveCom\DriveCom\Startup.cs:line 427
      at DriveCom.Startup._SendFirmware() in C:\fw\Psychson-master\Psychson-master\DriveCom\DriveCom\Startup.cs:line 378
      at DriveCom.Startup.Main(String[] args) in C:\fw\Psychson-master\Psychson-master\DriveCom\DriveCom\Startup.cs:line 114

      • pentestshop February 9, 2017 at 3:13 pm Permalink

        Is see in the information u posted that is says Reported chip type: 2302 this cannot work!
        Only with a Phison 2303

  29. user_1306 July 26, 2016 at 11:32 am Permalink

    we cannot just change the hello.txt file to change the script ?

  30. nameless August 23, 2016 at 7:08 am Permalink

    Hey just wondering if these usb’s will work
    Phison 2251-61
    Phison 2251-67

  31. username September 1, 2016 at 7:17 pm Permalink

    When I execute : java -jar c:\fw\ducky\duckencode.jar -i c:\fw\ducky\HelloWorld.txt -o c:\fw\ducky\inject.bin I get an error can you please help me

    C:\Windows\system32>java -jar c:\fw\ducky\duckencode.jar -i c:\fw\ducky\HelloWor
    ld.txt -o c:\fw\ducky\inject.bin
    Error with input file!
    Exception in thread “main” java.lang.reflect.InvocationTargetException
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
    at java.lang.reflect.Method.invoke(Unknown Source)
    at org.eclipse.jdt.internal.jarinjarloader.JarRsrcLoader.main(JarRsrcLoa
    der.java:58)
    Caused by: java.lang.NullPointerException
    at Encoder.main(Encoder.java:111)
    … 5 more

    • pentestshop September 10, 2016 at 8:47 pm Permalink

      Have u installed Java Runtime Environment 7 JRE? and the SDCC (Small Device C Compiler) ?

  32. George September 12, 2016 at 4:10 pm Permalink

    Some one help?!?
    Microsoft Windows [Version 10.0.14393]
    (c) 2016 Microsoft Corporation. All rights reserved.

    C:\WINDOWS\system32>java -jar c:\fw\ducky\duckencode.jar -i c:\fw\ducky\HelloWorld.txt -o c:\fw\ducky\inject.bin
    Error with input file!
    Exception in thread “main” java.lang.reflect.InvocationTargetException
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
    at java.lang.reflect.Method.invoke(Unknown Source)
    at org.eclipse.jdt.internal.jarinjarloader.JarRsrcLoader.main(JarRsrcLoader.java:58)
    Caused by: java.lang.NullPointerException
    at Encoder.main(Encoder.java:111)
    … 5 more

    • pentestshop September 12, 2016 at 4:30 pm Permalink

      Check if u installed correctly installed Java JRE..Or add Pentestingshop on facebook and chat with me..Maybe i can take a look myself using teamviewer.

  33. AmirWizard September 19, 2016 at 2:48 pm Permalink

    Hi thanks for your good tutorial.
    I have a Toshiba usb by ( Phison 2251-67 ) controller.
    Is it work in this usb too?
    thanks.

    • pentestshop September 25, 2016 at 6:58 pm Permalink

      AmirWizard no u can only do it with a Phison 2251-03 (2303) nand chipset! Do not try to do it with another controller or your usb can be broken beyond repair :p

  34. AmirWizard September 22, 2016 at 1:28 pm Permalink

    Hi Thanks for your good tutorial,I got a problem in fourth command guide:

    c:\fw\Psychson-master\tools\DriveCom.exe /drive=E /action=DumpFirmware /firmware=c:\fw\currentfw.bin

    Here the picture of error: http://uupload.ir/files/we38_error.png

    what’s the problem?what should I do?
    thanks.

    • pentestshop September 25, 2016 at 7:01 pm Permalink

      did you also tried it with a Phison 2251-03 (2303)? Cause in your previous comment you talked about a Phison 2251-67

  35. mark_bo September 22, 2016 at 7:12 pm Permalink

    Hello, can i use this USB?

    Volume: E:
    Controller: SSS 6698 BB
    Possible Memory Chip(s):
    Toshiba TC58NVG6D2GTA00
    Memory Type: MLC
    Flash ID: 98DE9482 7656
    Flash CE: 1
    VID: 0951
    PID: 1665
    Manufacturer: Kingston
    Product: DataTraveler 2.0
    Query Vendor ID: Kingston
    Query Product ID: DataTraveler 2.0
    Query Product Revision: 1.00
    Physical Disk Capacity: 7747397632 Bytes
    Windows Disk Capacity: 7746347008 Bytes
    Internal Tags: 386H-QAB4
    File System: NTFS
    Relative Offset: 1024 KB
    USB Version: 2.00
    Declared Power: 100 mA
    ContMeas ID: 4379-03-00
    Microsoft Windows 10 x64 Build 10586
    ————————————
    http://www.antspec.com/usbflashinfo/
    Program Version: 8.7.0.597

    • pentestshop September 25, 2016 at 7:12 pm Permalink

      No u cannot use that USB STICK, only one with a Phison 2251-03 (2303) nand Chipset or controller.

  36. Scott September 24, 2016 at 4:14 am Permalink

    Thanks for such a great tutorial. I was able to get this working on the first try. Hard to find USBs any more with the right chip but I lucked out.

    I have a question that has been nagging me…. This applies to an actual RubberDucky as well as the one I just made.

    When I plug the device into a computer for the first time, I get the “Installing Device” message in task manager and the payload doesn’t execute. If, after that, I unplug the usb stick and reinsert it, it runs fine.

    Is there any way around this?

    Thanks!

    • pentestshop September 25, 2016 at 7:31 pm Permalink

      Great that it worked out for you! I see many people are struggling to get it working..I also didn’t have any problem with it..But about your question involving a solution for the new device, i can only say that there is no way around this..On every Computer u plug it in the first time u need to let the device install first as a hid controller..But maybe a tip is try always to plug it in a USB 3.0 port(blue) It will work much faster

  37. Soul Ripper October 12, 2016 at 4:00 pm Permalink

    *** Building main.cā€¦
    ā€˜C:\Programā€™ is not recognized as an internal or external command,
    operable program or batch file.
    at 1: warning 190: ISO C forbids an empty source file
    *** There were errors! ***
    *** Done.

    Why i am seeing this ?

  38. soulremover October 21, 2016 at 12:56 pm Permalink

    hello there guys. I don;t own a Rubber Ducky, instead i found some usb sticks with the proper Phison chip and managed to “cook” a BadUsb. Ofc i am using the (latest) duckencoder.jar to make the inject.bin file. Everything worked out fine. The problem is that the payload is not running under Windows … Tried both with the .jar and the python method. No matter what i try it’s not working, (tried WINDOWS r, GUI r, CONTROL ESCAPE etc)
    Here is the script i am using for the inject.bin file
    DELAY 5000
    WINDOWS r
    DELAY 1000
    STRING notepad
    DELAY 1000
    ENTER
    DELAY 1000
    STRING Hello World!!!
    ENTER
    When i plug in the usb nothing happens. When i boot with Kali Linux and open a terminal i can see it’s working because words like “r” , “notepad” and “Hello World” are appearing
    Any help ? Thoughts on the matter ?
    Thanks in advance !!

    • pentestshop October 21, 2016 at 2:03 pm Permalink

      Hi, the problem is u use the old scripting language instead of WINDOWS u need to use GUI
      so your script should be
      DELAY 5000
      GUI r
      DELAY 1000
      STRING notepad
      DELAY 1000
      ENTER
      DELAY 1000
      STRING Hello World!!!
      ENTER

      • soulremover October 21, 2016 at 2:25 pm Permalink

        i mentioned in my original post this “No matter what i try itā€™s not working, (tried WINDOWS r, GUI r, CONTROL ESCAPE etc)” . None of them works. Any other thoughts ? I own a Verbatim Store n Go V3 8GB

        • pentestshop October 21, 2016 at 2:34 pm Permalink

          Did you try it with the online ducky encoder? https://ducktoolkit.com/encoder/ also make sure u set the right keyboard language and it should generate i good *.bin file

          • soulremover October 21, 2016 at 3:20 pm Permalink

            i did that too mate… i really don’t know what the problem is, really. i think i read somewhere that on win10 they fixed the badusb issue. Maybe it is “fixed” on my win 8.1 too ? Maybe no matter what i try it won’t work due to that “fix” ?

          • pentestshop October 21, 2016 at 3:45 pm Permalink

            i can tell u for sure that it’s not a problem with Windows 10 or Windows 8.1 cause i used it on many different Computers using Windows 10 or 8.1
            Did you try it already on another computer? Instead of in Kali Linux ?

  39. soulremover October 21, 2016 at 4:40 pm Permalink

    my girlfriends’ laptop with win 8.0, not working … i am disappointed and sad that i cannot make it work !! i run out of ideas as well… i have Zemana AntiMalware and Windows Defender ON, can that be the problem ? it shouldn’t thought… Any ideas ?

    • pentestshop October 23, 2016 at 10:54 am Permalink

      A AntiMalware or Windows Defender shouldn’t give any problem since the USB Stick emulates a Keyboard and the computer thinks the user does these things!

  40. soulremover October 21, 2016 at 4:43 pm Permalink

    can we talk more private and faster ? facebook ? skype ? email ? whatever ? thanks

    • pentestshop October 23, 2016 at 10:55 am Permalink

      You can add Pentestingshop on Facebook and u can then send me a message..So that we then maybe can interact using Teamviewer

  41. soulremover October 22, 2016 at 8:31 am Permalink

    if you are interested, check this out. it’s like a badusb2 or something https://github.com/withdk/badusb2-mitm-poc

    • pentestshop October 23, 2016 at 10:56 am Permalink

      Thanks,looks nice but sadly only a proof of concept and not completed yet

  42. NexusHD October 22, 2016 at 4:15 pm Permalink

    I need help ;(
    I have this usb stick.

    “Volume: F:
    Controller: Phison PS2307
    Possible Memory Chip(s): Not available
    Flash ID: 98DE88A3 7251
    Chip F/W: 02.15.55
    Firmware Date: 2015-07-22
    ID_BLK Ver.: 1.3.0.0
    MP Ver.: MPALL v3.34.00
    VID: 0930
    PID: 6545
    Manufacturer: TOSHIBA
    Product: TransMemory Mx
    Query Vendor ID: TOSHIBA
    Query Product ID: TransMemory Mx
    Query Product Revision: PMAP
    Physical Disk Capacity: 7801405440 Bytes
    Windows Disk Capacity: 7788838912 Bytes
    Internal Tags: 2Q6P-SX5L
    File System: FAT32
    Relative Offset: 4032 KB
    USB Version: 3.00 in 2.00 port
    Declared Power: 300 mA
    ContMeas ID: 5A83-07-00
    Microsoft Windows 10 x64 Build 14393
    ————————————
    http://www.antspec.com/usbflashinfo/
    Program Version: 8.7.0.597″

    and i try to brun my firmware but i donĀ“t work…


    C:\WINDOWS\system32>d:\fw\Psychson-master\tools\DriveCom.exe /drive=F /action=SendFirmware /burner=d:\fw\fw_bn\BN07V106M.BIN /firmware=d:\fw\Psychson-master\firmware\bin\fw.bin
    Action specified: SendFirmware
    Gathering information…
    Reported chip type: 2307
    Reported chip ID: 98-DE-88-A3-72-51
    Reported firmware version: 1.03.10
    Mode: Burner
    Rebooting…
    Sending firmware…
    FATAL: System.InvalidOperationException: Header not accepted
    bei DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) in D:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:Zeile 256.
    bei DriveCom.Startup._RunFirmware(String fileName) in D:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:Zeile 427.
    bei DriveCom.Startup._SendFirmware() in D:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:Zeile 378.
    bei DriveCom.Startup.Main(String[] args) in D:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:Zeile 114.

    what can i do?

    • pentestshop October 23, 2016 at 10:59 am Permalink

      U can not do it using a USB Stick that has a Phison PS2307 nand chipset, even if u try to use the right burner for a Phison PS2307, u will need a USB Stick with a Phison 2303 (2251-03) nand chipset

  43. Roi November 9, 2016 at 10:07 am Permalink

    Can u give a link to the right java version? cause in the tutorial u typed java Runtime Environment 7 but in the picture its saying 8…

    • pentestshop November 9, 2016 at 6:26 pm Permalink

      Yes correct,i made the text and a couple months later edited the screenshots..But good noticed..But you can just download and install version 8 it’s backwards compatible…LINK

  44. azi November 10, 2016 at 5:04 pm Permalink

    Hi!

    What can i do to solve the “Error on Line: 6” when i enter the first command?

    Line 6 of my script is:

    “CTRL-SHIFT ENTER”

    Should i replace it with something else?

  45. ilias November 11, 2016 at 1:04 pm Permalink

    can i setup the rubber ducky on windows xp? and do you know any sandisk flash drives with the Phison 2303 (2251-03)?

    • pentestshop November 11, 2016 at 10:58 pm Permalink

      U can use the Rubber Ducky on every type of OS, since it’s you who writes the code that it types out.
      And no i cannot tell u anymore what sandisk flash drive has the Phison 2203 nand chipset, since most of them manufactures changed to the Phison 2207 nand chip

  46. ken November 15, 2016 at 12:56 pm Permalink

    C:\Windows\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=I /action=Se
    ndExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN
    Action specified: SendExecutable
    FATAL: System.InvalidOperationException: Header not accepted
    at DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) in
    c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 256
    at DriveCom.PhisonDevice.TransferFile(Byte[] data) in c:\fw\Psychson-master\D
    riveCom\DriveCom\PhisonDevice.cs:line 238
    at DriveCom.Startup._ExecuteImage(String fileName) in c:\fw\Psychson-master\D
    riveCom\DriveCom\Startup.cs:line 403
    at DriveCom.Startup.Main(String[] args) in c:\fw\Psychson-master\DriveCom\Dri
    veCom\Startup.cs:line 109

    • ken November 15, 2016 at 12:57 pm Permalink

      i have problem can you help me

    • pentestshop November 26, 2016 at 9:04 pm Permalink

      Paste the information you got with GetFlashInfo in front off the post please, so i know u have a good USB Stick to begin with

  47. boomboom November 23, 2016 at 5:31 am Permalink

    I am getting this error when trying to set action to send exec

    C:\WINDOWS\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=E /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN
    Action specified: SendExecutable
    FATAL: System.InvalidOperationException: Header not accepted
    at DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 256
    at DriveCom.PhisonDevice.TransferFile(Byte[] data) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 238
    at DriveCom.Startup._ExecuteImage(String fileName) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 403
    at DriveCom.Startup.Main(String[] args) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 109

    any help plz šŸ™‚

  48. boomboomrwr November 23, 2016 at 5:34 am Permalink

    Hello i keep getting errors trying to put usb in executable mode some help will be appreciated šŸ™‚

    C:\WINDOWS\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=E /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN
    Action specified: SendExecutable
    FATAL: System.InvalidOperationException: Header not accepted
    at DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 256
    at DriveCom.PhisonDevice.TransferFile(Byte[] data) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 238
    at DriveCom.Startup._ExecuteImage(String fileName) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 403
    at DriveCom.Startup.Main(String[] args) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 109

    • pentestshop November 26, 2016 at 9:00 pm Permalink

      Are you sure u also are using a good USB Stick?
      Always let me know that first before posting error’s so paste the information you got with GetFlashInfo in front off the post please

  49. elventu November 23, 2016 at 12:56 pm Permalink

    Hi, I got a problem with the last step when entering “c:\fw\Psychson-master\tools\DriveCom.exe /drive=E /action=SendFirmware /burner=c:\fw\fw_bn\BN03V104M.BIN /firmware=c:\fw\Psychson-master\firmware\bin\fw.bin” it shows me the next lines:
    Action specified: SendFirmware
    Gathering information…
    Reported chip type: 2307
    Reported chip ID: 98-3A-98-A3-76-51
    Reported firmware version: 2.15.55
    Mode: Firmware
    Switching to boot mode…
    FATAL: System.InvalidOperationException: DeviceIoControl failed: 0079
    en DriveCom.PhisonDevice._SendCommand(SafeFileHandle handle, Byte[] cmd, Byte[] data, Int32 bytesExpected) en C:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:lĆ­nea 365
    en DriveCom.PhisonDevice.SendCommand(Byte[] cmd, Byte[] data) en C:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:lĆ­nea 314
    en DriveCom.PhisonDevice.SendCommand(Byte[] cmd) en C:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:lĆ­nea 304
    en DriveCom.PhisonDevice.JumpToPRAM() en C:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:lĆ­nea 228
    en DriveCom.Startup._ExecuteImage(String fileName) en C:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:lĆ­nea 404
    en DriveCom.Startup._SendFirmware() en C:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:lĆ­nea 375
    en DriveCom.Startup.Main(String[] args) en C:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:lĆ­nea 114
    Thanks for all

    • pentestshop November 26, 2016 at 8:57 pm Permalink

      you are using a wrong USB Stick you have a Phison 2307 nand chip

      i see this on the 6th line you posted here
      Reported chip type: 2307

      So it’s a no go for that stick

  50. Dg IRfan November 24, 2016 at 5:42 am Permalink

    Can i use this USB?

    Controller: Phison 2251-68
    Possible Memory Chip(s):
    Hynix H27UCG8T2A
    Hynix H27UCG8T2ATR
    Hynix H27UCG8T2ATRx2
    Memory Type: MLC
    Flash ID: ADDE94DA 74C4
    Chip F/W: 01.03.10
    Firmware Date: 2013-12-19
    ID_BLK Ver.: 1.2.56.0
    MP Ver.: MPALL v3.28.0B
    VID: 0951
    PID: 1665
    Manufacturer: Kingston
    Product: DataTraveler 2.0
    Query Vendor ID: Kingston
    Query Product ID: DataTraveler 2.0
    Query Product Revision: PMAP
    Physical Disk Capacity: 7864320000 Bytes
    Windows Disk Capacity: 7855996928 Bytes
    Internal Tags: 2Q6P-SX5K
    File System: FAT32
    Relative Offset: 4032 KB
    USB Version: 2.00
    Declared Power: 200 mA
    ContMeas ID: DC08-03-00

    • pentestshop November 26, 2016 at 8:54 pm Permalink

      no sorry, only with the Phison 2251-03 (2303) which will be hard to find anymore these day’s since the suppliers all changed them to the Phison PS2307 nand chipset šŸ™

      • Dg IRfan November 28, 2016 at 4:50 pm Permalink

        Damnit, I thought I was close šŸ™
        Thanks.

  51. Blu December 1, 2016 at 12:06 pm Permalink

    hello,

    great how-to, I’m stuck at this point:

    SET ACTION TO SEND EXECUTABLE USING BURNER IMAGE
    c:\fw\Psychson-master\tools\DriveCom.exe /drive=E /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN

    And I receive these errors:
    C:\>c:\fw\Psychson-master\tools\DriveCom.exe /drive=E /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN
    Action specified: SendExecutable
    FATAL: System.InvalidOperationException: Header not accepted
    at DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 256
    at DriveCom.PhisonDevice.TransferFile(Byte[] data) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 238
    at DriveCom.Startup._ExecuteImage(String fileName) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 403
    at DriveCom.Startup.Main(String[] args) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 109

    Flash Drive Information Extractor tool, reported the below information about mine usb thumb:

    Volume: E:
    Controller: Phison 2303 (2251-03)
    Possible Memory Chip(s):
    Toshiba TC58NVG6D2GTA00
    Memory Type: MLC
    Flash ID: 98DE9482 76D6
    Chip F/W: 05.04.10
    Firmware Date: 2016-04-12
    ID_BLK Ver.: 1.4.3.0
    MP Ver.: MPALL v5.3.0B
    VID: 18A5
    PID: 0243
    Manufacturer: Verbatim
    Product: STORE N GO
    Query Vendor ID: Verbatim
    Query Product ID: STORE N GO
    Query Product Revision: PMAP
    Physical Disk Capacity: 7746879488 Bytes
    Windows Disk Capacity: 7738507264 Bytes
    Internal Tags: 2P2P-SX3J
    File System: FAT32
    Relative Offset: 4032 KB
    USB Version: 2.00
    Declared Power: 126 mA
    ContMeas ID: 0941-01-00
    Microsoft Windows 7 SP1 x64 Build 7601
    ————————————
    http://www.antspec.com/usbflashinfo/
    Program Version: 8.7.0.597

    Any helps are more than welcome, cheers šŸ™‚

  52. Altushe December 7, 2016 at 7:39 pm Permalink

    Error with input file!
    Exception in thread “main” java.lang.reflect.InvocationTargetException
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
    at java.lang.reflect.Method.invoke(Unknown Source)
    at org.eclipse.jdt.internal.jarinjarloader.JarRsrcLoader.main(JarRsrcLoa
    der.java:58)
    Caused by: java.lang.NullPointerException
    at Encoder.main(Encoder.java:111)

    how do i fix it????????

    • pentestshop December 17, 2016 at 2:59 am Permalink

      always post your info from GetFlashinfo first,to make sure u have a Phison 2251-03

  53. Andrew December 13, 2016 at 6:02 pm Permalink

    Hi I have a USB with a prison 2251-33 (2233) would this work ?
    Thanks

  54. Dorel December 21, 2016 at 7:08 am Permalink

    Hello I had a problem at the final step (command).

    First time i had the same error but when i tried to execute :

    c:\fw\Psychson-master\tools\DriveCom.exe /drive=L /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN

    After I do the PinsToShortUponPlugInForBootMode

    I put a knife into the first and second pin and connect the usb.
    The Windows find new driver and installed

    Now my usb is in BootMode

    This is my memoy stik info now :

    Volume: L:
    Controller: Phison 2302 (2251-02)
    Possible Memory Chip(s): Not available
    Chip F/W: 01.01.10
    Firmware Date: 2012-10-22
    VID: 13FE
    PID: 5200
    Manufacturer: Phison
    Product: 2303 FW BURNER
    Query Vendor ID:
    Query Product ID: 2303 PRAM
    Query Product Revision: 1.00
    Physical Disk Capacity: 0 Bytes
    Windows Disk Capacity: 0 Bytes
    Internal Tags: 2RAF-AAC3
    USB Version: 2.00
    Declared Power: 100 mA
    ContMeas ID: C8FC-11-00
    Microsoft Windows 8.1 x64 Build 9600
    ————————————
    http://www.antspec.com/usbflashinfo/
    Program Version: 8.7.0.597

    And this is my command promt with Admin Rights

    C:\Windows\system32>java -jar c:\fw\ducky\duckencode.jar -i c:\fw\ducky\HelloWorld.txt -o c:\fw\ducky\inject.bin

    C:\Windows\system32>c:\fw\Psychson-master\tools\EmbedPayload.exe c:\fw\ducky\inject.bin c:\fw\Psychson-master\firmware\bin\fw.bin
    File updated.

    C:\Windows\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=L /action=SetBootMode
    Action specified: SetBootMode

    C:\Windows\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=L /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN
    Action specified: SendExecutable

    C:\Windows\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=L /action=DumpFirmware /firmware=c:\fw\currentfw.bin
    Action specified: DumpFirmware

    C:\Windows\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=L /action=SendFirmware /burner=c:\fw\fw_bn\BN03V104M.BIN /firmware=c:\fw\Psychson-master\firmware\bin\fw.bin

    Action specified: SendFirmware
    Gathering information…
    Reported chip type: 2302
    Reported chip ID: 98-3A-94-93-76-51
    Reported firmware version: 1.01.10
    Mode: Burner
    Rebooting…
    Sending firmware…
    FATAL: System.InvalidOperationException: Header not acceptedat DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) in
    c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 256 at DriveCom.Startup._RunFirmware(String fileName) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 427 at DriveCom.Startup._SendFirmware() in
    c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 378 at DriveCom.Startup.Main(String[] args) in
    c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 114
    C:\Windows\system32>

    Now it works till the last command like u see.

    What can i do to make it work ?
    Can someone help me ?

  55. JACK February 8, 2017 at 4:44 pm Permalink

    hello ,
    I have a error :
    C:\WINDOWS\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=G /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN
    Action specified: SendExecutable
    FATAL: System.InvalidOperationException: DeviceIoControl failed: 0006
    Ć  DriveCom.PhisonDevice._SendCommand(SafeFileHandle handle, Byte[] cmd, Byte[] data, Int32 bytesExpected) dans c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:ligne 365
    Ć  DriveCom.PhisonDevice.SendCommand(Byte[] cmd, Byte[] data) dans c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:ligne 314
    Ć  DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) dans c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:ligne 246
    Ć  DriveCom.PhisonDevice.TransferFile(Byte[] data) dans c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:ligne 238
    Ć  DriveCom.Startup._ExecuteImage(String fileName) dans c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:ligne 403
    Ć  DriveCom.Startup.Main(String[] args) dans c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:ligne 109

    when i write ” c:\fw\Psychson-master\tools\DriveCom.exe /drive=G /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN” in my CMD I have this error, i don’t understand. Can i have help please?
    sorry for the spelling but I’m french….
    TANKS

    • JACK February 8, 2017 at 4:49 pm Permalink

      The drive letter is correct.

    • pentestshop February 9, 2017 at 3:21 pm Permalink

      What USB Stick did u use?
      And did you check the nand chip using GetFlashInfo?
      Or try to open the USB Stick gently and read what’s on the smallest chip
      it should say Phison 2251-03 (2303)
      Let me know that first

  56. Tester February 15, 2017 at 2:28 pm Permalink

    Kingston DT Ultimate G3 use Phison:

    Controller: Phison 2303 (2251-03)
    Possible Memory Chip(s): Not available
    Flash ID: ********
    Chip F/W: 01.12.10
    Firmware Date: 2014-08-07
    ID_BLK Ver.: 1.2.84.0
    MP Ver.: MPALL v3.31.0C
    VID: 0951
    PID: 1697
    Manufacturer: Kingston
    Product: DT Ultimate G3
    Query Vendor ID: Kingston
    Query Product ID: DT Ultimate G3
    Query Product Revision: PMAP
    Physical Disk Capacity: 62948114432 Bytes
    Windows Disk Capacity: 62881038336 Bytes
    Internal Tags: *******
    File System: FAT32
    Relative Offset: 46496 KB
    USB Version: 3.00 in 2.00 port
    Declared Power: 300 mA
    ContMeas ID: ******
    Microsoft Windows 7 SP1 x64 Build 7601
    ————————————
    http://www.antspec.com/usbflashinfo/
    Program Version: 8.8.0.600

  57. Tester February 15, 2017 at 3:00 pm Permalink

    C:\fw>c:\fw\Psychson-master\tools\DriveCom.exe /drive=E /action=SendFirmware /bu
    rner=c:\fw\fw_bn\BN03V104M.BIN /firmware=c:\fw\Psychson-master\firmware\bin\fw.b
    in
    Action specified: SendFirmware
    Gathering information…
    Reported chip type: 2302
    Reported chip ID: 98-3A-A4-93-7A-50
    Reported firmware version: 1.01.10
    Mode: Burner
    Rebooting…
    Sending firmware…
    FATAL: System.InvalidOperationException: Header not accepted
    at DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) in
    c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 256
    at DriveCom.Startup._RunFirmware(String fileName) in c:\fw\Psychson-master\Dr
    iveCom\DriveCom\Startup.cs:line 427
    at DriveCom.Startup._SendFirmware() in c:\fw\Psychson-master\DriveCom\DriveCo
    m\Startup.cs:line 378
    at DriveCom.Startup.Main(String[] args) in c:\fw\Psychson-master\DriveCom\Dri
    veCom\Startup.cs:line 114

    • pentestshop February 19, 2017 at 5:52 pm Permalink

      weird that it say’s Reported chip type: 2302 cause in your previous post it says Controller: Phison 2303 (2251-03)..
      But if it detects a 2302 it will not work.

  58. tndhkfl February 27, 2017 at 11:33 pm Permalink

    can u deliver the usb to korea??

    is it able to run exe file when i just plug the usb to computer??

    • pentestshop March 14, 2017 at 7:32 pm Permalink

      no sorry i dont ship to korea
      And i cant deliver the usb sticks anymore since all the nand chipsets changed
      Also no it dosent work like that,it uses the duckencoder

  59. Nathan February 28, 2017 at 1:31 am Permalink

    HELP! I am at the step where we have to set the usb stick to boot mode and i keep getting the same error. It worked once all the way until i had to send the firmware once.

    Error log for set to boot mode:

    C:\WINDOWS\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=G /action=SetBootMode
    Action specified: SetBootMode
    FATAL: System.InvalidOperationException: DeviceIoControl failed: 0006
    at DriveCom.PhisonDevice._SendCommand(SafeFileHandle handle, Byte[] cmd, Byte[] data, Int32 bytesExpected) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 365
    at DriveCom.PhisonDevice.SendCommand(Byte[] cmd, Byte[] data) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 314
    at DriveCom.PhisonDevice.SendCommand(Byte[] cmd) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 304
    at DriveCom.PhisonDevice.JumpToBootMode() in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 233
    at DriveCom.Startup.Main(String[] args) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 124

    Error log for send executable:

    C:\WINDOWS\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=G /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN
    Action specified: SendExecutable
    FATAL: System.InvalidOperationException: DeviceIoControl failed: 0006
    at DriveCom.PhisonDevice._SendCommand(SafeFileHandle handle, Byte[] cmd, Byte[] data, Int32 bytesExpected) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 365
    at DriveCom.PhisonDevice.SendCommand(Byte[] cmd, Byte[] data) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 314
    at DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 246
    at DriveCom.PhisonDevice.TransferFile(Byte[] data) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 238
    at DriveCom.Startup._ExecuteImage(String fileName) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 403
    at DriveCom.Startup.Main(String[] args) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 109

    Error log for dump firmware:

    C:\WINDOWS\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=G /action=DumpFirmware /firmware=c:\fw\currentfw.bin
    Action specified: DumpFirmware
    FATAL: System.InvalidOperationException: DeviceIoControl failed: 0006
    at DriveCom.PhisonDevice._SendCommand(SafeFileHandle handle, Byte[] cmd, Byte[] data, Int32 bytesExpected) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 365
    at DriveCom.PhisonDevice.SendCommand(Byte[] cmd, Int32 bytesExpected) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 295
    at DriveCom.Startup._DumpFirmware(String fileName) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 341
    at DriveCom.Startup.Main(String[] args) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 99

    Error log for send firmware:

    C:\WINDOWS\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=G /action=SendFirmware /burner=c:\fw\fw_bn\BN03V104M.BIN /firmware=c:\fw\Psychson-master\firmware\bin\fw.bin
    Action specified: SendFirmware
    Gathering information…
    FATAL: System.InvalidOperationException: DeviceIoControl failed: 0006
    at DriveCom.PhisonDevice._SendCommand(SafeFileHandle handle, Byte[] cmd, Byte[] data, Int32 bytesExpected) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 365
    at DriveCom.PhisonDevice.SendCommand(Byte[] cmd, Int32 bytesExpected) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 295
    at DriveCom.PhisonDevice.RequestVendorInfo() in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 140
    at DriveCom.PhisonDevice.GetChipType() in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 170
    at DriveCom.Startup._GetInfo() in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 384
    at DriveCom.Startup._SendFirmware() in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 365
    at DriveCom.Startup.Main(String[] args) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 114

    Usb info:

    Volume: F:
    Controller: Phison 2251-61 (2261)
    Possible Memory Chip(s):
    Toshiba TC58NVG6D2GTA00
    Memory Type: MLC
    Flash ID: 98DE9482 7656
    Chip F/W: 03.08.10
    Firmware Date: 2012-03-07
    ID_BLK Ver.: 1.1.88.0
    MP Ver.: MPALL v3.60.00
    VID: 18A5
    PID: 3E23
    Manufacturer: Verbatim
    Product: STORE N GO
    Query Vendor ID: Verbatim
    Query Product ID: STORE N GO
    Query Product Revision: 5.00
    Physical Disk Capacity: 8006926336 Bytes
    Windows Disk Capacity: 7986020352 Bytes
    Internal Tags: 2P2P-SX3L
    File System: FAT32
    Relative Offset: 4032 KB
    USB Version: 2.00
    Declared Power: 200 mA
    ContMeas ID: 7EA9-04-00
    Microsoft Windows 10 x64 Build 14393

    Thanks in Advance! I also tried your tutorial on how to recover a usb drive but it didnt work either.

    • pentestshop March 14, 2017 at 7:38 pm Permalink

      i’m sorry but in your usb info is see u are using the wrong type off usb stick 2251-61 it can not work with that nand chipset

  60. knigtblood March 6, 2017 at 4:10 am Permalink

    what software do i use to detect and verify the usb chipset it uses ?

Leave a Reply

ENTER CAPTCHA * Time limit is exhausted. Please reload CAPTCHA.