Did you ever wanted to make your own USB Rubber Ducky?
Well now you can using a regular USB stick, i must start with mentioning that it can not be done with all the USB sticks you will need one with a specific Nand chipset on it.
More specific the Phison 2251-03 (2303)
So now you are probably wondering where do i get that specific usb stick then, and how do i know what chipset is on it?
On github there is a list with all know compatible devices, but most off them are not for sale anymore.
So what do i do then ?
Well you can buy one in my webshop 🙂
So this is what u need to get started, and you will also need the following things:
FILE ONE:
- The Zip file from github found here : LINK
FILE TWO:
- Visual Studio 2012 Express which can be downloaded here : LINK
- SDCC (Small Device C Compiler) which can be downloaded here : LINK
FILE FOUR:
- Java Runtime Environment 7 which can be downloaded here : LINK
FILE FIVE:
- Duckencoder.jar which can be downloaded here : LINK
FILE SIX:
The Burner image and firmware for flashing the USB stick
Which can be download here : LINK
==============================================
Now that u downloaded all these files u are ready to install them!
Follow along with me for how to install all this properly
So we only need to install 3 things (cause other are just zip packages you will need).
Let’s begin with Microsoft Visual Studio Express 2012
Step One :
Go to the location where u downloaded the Visual Studio Express 2012 setup
Mine is in Downloads
so double click this icon where u saved it
now follow along with the procedure shown below.
Now make sure u check the box I agree to the License terms and conditions
and click INSTALL
u should then see the following things pass by
and when it’s done u should see this
u now need to press the LAUNCH button to start Visual Studio Express
From the moment u pressed LAUNCH u should see this
Click on the Register Online (Dont worry u will not need to pay anything cause this is a free version, but you must sign in using a existing e-mail address u have at Microsoft)
like shown here
So fill in the email address and password you have at Microsoft (aka hotmail.com, outlook.com,..etc)
and click Sign In
next u should see this
now when u see this the email address you signed in with should be automatically be filled in, i blanked out mine(for spam reason) but in the Dropdown menu where it’s asking Are you registering Visual Studio for Academic, Business or Personal use? u should choose Personal
And where it’s asking Are you creating software for public distribution, online use by others or private use? u should choose Private Use
Once u did all this Click on Continue
U should now get this
Your Product Key for activating the Visual Studio Express 2012
So copy the Product Key and go back to the pop-up u started with
And paste the Product Key in the field and Click Next
when u did this and everything is fine u should get this
so click Close
and next u will end up in Visual Studio Express 2012
since we don’t need it right away u can close the program for now.
Step Two :
Next we are going to install SDCC (Small Device C Compiler)
so double click this icon where u download it to mine is again also under Downloads
now follow along with the pictures below
Now the next step is Very Important!
U should make sure u are installing it to C:\Program Files\SDCC
after u clicked Install u should see it installing like shown here below
And followed by this
So now click Next
And click Finish
U are now done with installing SDCC (Small Device C Compiler)
Step Three :
We are now going to install Java Runtime Environment 8
well be needing this to run Duckencoder.jar
Now again go to the location where u saved the installer and double click this icon
and follow along with the pictures below
when u see this click Install
and yes it’s true 3 Billion Devices Run Java maybe even your microwave 🙂
when the setup process is complete u should get this
So now that it’s done click Close
Setting things up:
Unpacking the Psychson-master.zip u downloaded from github (so FILE ONE)
So browse to the location where u downloaded it to, mine again is in Downloads
And now where u see this icon right click on it and select Extract Here like shown here below
Now that u did this u should get the Folder Psychson-master in the location where u started from so in my case C:\Users\Pentestlab\Downloads>
Now that u have this folder we should copy it to another location.
I highly suggest you do exactly the same as i do so that afterwards u can download my help file with the commands in it.
So now right click on the folder Psychson-master and select copy like shown here
Now that u copied the file Open My Computer and go to your C:\
And create a new folder called fw (all in lowercase)
like shown below:
Now open that folder fw that u just created and paste the Psychson-master folder inside!
u should then have the folder Psychson-master inside the folder c:\fw\
like shown here
So now that u pasted the folder Psychson-master here where going to place all the other files we need here under c:\fw
since you are now in the folder c:\fw right click here and create a new folder called fw_bn
like shown here
now create another folder called ducky like shown here
now on top u downloaded file six and it is named firmware_ps2251-03.rar
it should be in your Downloads folder at this time, but we need to place it in the fw_bn folder and extract it there
so copy the firmware_ps2251-03.rar file from your Downloads folder like shown below
and paste it under c:\fw\fw_bn
like shown here
And now that u pasted the file firmware_ps2251-03.rar here under c:\fw\fw_bn u should extract it here
like shown here
u should then have this
But now we need to get some files out off this folder and copy it to this location c:\fw\fw_bn
So open the folder Firmware PS2251-03 like shown here below and copy the files BN03V104M.BIN and FW03FF01V10753M_20130621.BIN
like shown here
So now that u copied these files go back one folder so to the folder c:\fw\fw_bn and paste these 2 files here
so like this
u should then have this
The files BN03V104M.BIN and FW03FF01V10753M_20130621.BIN under c:\fw\fw_bn
Now that this is done u should move on to the next step
The next step is copying the file duckencoder.jar to c:\fw\ducky
So go to the location where u saved duckencoder.jar my is still under Downloads so i need to copy it
like shown here
now that u copied this file we should move it to c:\fw\ducky
so go to the location c:\fw\ducky and paste the file duckencoder.jar here
like shown here
u should then have this
the file duckencoder.jar in the folder c:\fw\ducky
so you should now have the folders ducky, fw_bn and Psychson-master in c:\fw
like shown here
So listed out for u once more
duckencoder.jar (file five on top) under c:\fw\ducky
BN03V104M.BIN and FW03FF01V10753M_20130621.BIN (file six on top) under c:\fw\fw_bn
and the extracted github zip file (file one on top) under c:\fw (the folder in the zipfile from github is already called Psychson-master) so make sure u don’t have this folders double!
Now we are ready with putting all the files in place!
COMPILING ALL THE THINGS
So the next step is to compile all the stuff
So go to c:\fw\Psychson-master\DriveCom
and open the file DriveCom.sln
like shown here
So you should just double click on DriveCom.sln
and get this
now that u see this u should click in the top bar on Start
like shown here
Once u clicked on start u should see this
Now that u see this u should Close the window where it says “No action specified, entering console” First
like shown here
after u closed the command prompt window u should close the Visual Studio
like shown here
Now go to c:\fw\Psychson-master\Injector
like seen here
And double click on Injector.sln to open it in Visual Studio Express
u should then see this
again now that u see this u should click in the top bar on Start
like shown here
now once you clicked start u should get this
you should see some text in Output
so next close Visual Studio again
like shown here
So once you clicked the close button we should now go to following location
c:\fw\Psychson-master\EmbedPayload
and open the file EmbedPayload.sln
like shown here
Now once you double clicked this file u should see this
now that u see this u should click in the top bar on Start
like shown here
Once you did click in start you should again see some output text below
like seen here
now that this is done close Visual Studio again like shown here
Now all the compiling is done so let’s get one more thing we need to make it complete
the thing we need is a script for putting on the self made USB rubber ducky
we will be getting the Hello world script from the github
so go to to this website : LINK
you will then see this
So as you see in the picture u now need to click on the link to Payload – Hello World
u will then come to this page
so as you see in the picture we need to select all the text marked in blue and then right click and choose Copy
Now that u copied this text we need to go to the following location
c:\fw\ducky
and create a new text file
like shown here
And name the file HelloWorld.txt
like shown here
now that u created the text file HelloWorld.txt under c:\fw\ducky
open it by double clicking on it
and then we need to paste the code we copied from the github page inside the HelloWorld.txt
so in the empty document right click and choose Paste
and you should then have this
Now that the code is inside we need to save it
and close it like seen here below
So now that this is done we can start playing with the stick
First we are going to check if the stick really has the Phison 2251-03 (2303) chipset
we can check this by downloading the software called GetFlashInfo
get it from this LINK
when downloaded go to the location u saved it to mine is standard in Downloads
u should there see the zip file u downloaded
now right click on this and choose Extract here
u should then open the folder named usbflashinfo
so double click on this folder and you should then see these files
So now Insert your USB stick and double click on GetFlashInfo.exe
u should then see this
u should get this back as response
It’s very important that u get Phison 2303 (2251-03) as Controller
Normally if you bought a USB stick from my webshop it should be fine!
So now that we now for sure that the stick u have has the right nand chipset we can start making the USB Rubber Ducky
so first download this file i created with all the commands u will need for making the USB Rubber Ducky
from this LINK
For convenient work save the file under c:\fw
so you should now have this file like shown here
So now that u have my commandsguide.txt file double click on it and you should see this
So now leave the text file open and click on START and type cmd and then right click on Command Prompt and choose Run as Administrator
like shown here
you should then get this
So now go back to the text file u downloaded from my LINK (commandguide.txt) and copy the first line like shown here
Now that u copied the first line go back to the command prompt and right click and choose paste like shown here
u should then get this
when u pasted this press ENTER
and you should then see this
a new line and no errors if you see error on line 1 you should check the file HelloWorld.txt maybe it’s still empty
so now the command u just ran converted the HelloWorld.txt to a inject.bin using the duckencode.jar
Next we need to make a firmware file
so go to C:\fw\Psychson-master\firmware
and you should see the files like shown here
So now that u are in this folder u should double click on build.bat
like shown here
u should see some thing happening in a command prompt and then it automatically closes, but afterwards you should now see a bin folder in this location
like shown here
So next step we go back to the text file u downloaded from my website and we are going to copy the second line
like shown here
Now that u copied this
go back to the command prompt and paste it there (if you closed the cmd, be sure u run it again as Administrator)
like shown here
u should then get this
Now that u pasted the second line in the Command Prompt u should press ENTER
and when successfully you should see it print out File updated
like shown here
Now that this is done re-insert you USB stick
Now that the stick is your USB port open My computer and check what drive letter the USB Stick has.
like shown here
So make sure u remember the drive letter that has been assigned to your USB Stick!
So now go back to the text file u got from my website and copy the line under SET USB STICK IN BOOTMODE
like shown here
Like seen in the picture make sure that u change the drive letter to yours!
so where /drive=G is change the G to the drive letter that has been assigned to your USB Stick!
Now that u copied this line switch back to the Command Prompt and paste it there
like shown here
when u clicked paste u should get this
When u did this u can press ENTER
and u should then get this
Also if you removed the casing around the USB Stick u bought from my webshop u should see that the blue led stays on
So now that the USB Stick is in BootMode
Go back to the text file and copy the line under SET ACTION TO SEND EXECUTABLE USING BURNER IMAGE
like shown here
So now that u copied this line switch back to the Command Prompt and paste it there
like shown here
again when u clicked paste
u should get this
Now that the line is pasted u can press ENTER
and you should then see this
Now that this is done switch back to the text file
and copy the line under DUMP THE ORIGINAL FIRMWARE
like shown here
Now that u copied this line switch back to the Command Prompt and paste it there
like shown here
Now when u clicked paste you should see this
Now when u pasted it you can press ENTER
and should see this
Now that this is done switch one more time back to the text file and copy the line
under SEND PAYLOAD TO FIRMWARE
like shown here
now that u copied this line switch back to the Command Prompt and paste it there
like shown here
Now when u clicked paste you should get this
Now that it’s pasted u can press ENTER
and you should see this
You now just flashed your own USB Rubber Ducky using a regular USB Stick 🙂
Thanks for this tutorial. The hello world script work but how could i change the script.
U will need to flash the USB-stick back to stock first, you do this by using a tool from the flash vendor.
Sadly i cant specific tell which one since i don’t know on what USB-stick u did this? So what is the vendor? Corsair,Kingston,Patriot,..?
But u also need to shorten the pins first before u can do this, shortening the pins set it’s back in flash mode. Its pin 2 and 3 on the Phison 2251-03 chip
I use the Corsair Voyager LS .
http://www.pentestingshop.com/recover-a-usb-stick/
This is great, really good work, excellent explanation, i got the Kingston Digital 8GB USB 3.0 DataTraveler (DT100G3/8GB), if i want to add a different payload, i need to flash it back to stock and re do all process again? isnt there another way to do it? thanks!
Have you tried?
Did it work?
i got the Kingston Digital 8GB USB 3.0 DataTraveler (DT100G3/8GB), too
Thanks!
U need to do this
http://www.pentestingshop.com/recover-a-usb-stick/
Awesome, it works. But now I have the problem of flashing another script. I would like to restore the original firmware as mentioned above but I used this ghetto USB drive which has the correct controller. But I can’t seem to find a tool to revert the software. Any input would be appreciated.
Sorry for the late reply but i was working on this guide, it’s actually very simple. So go to this link and follow this process
http://www.pentestingshop.com/recover-a-usb-stick/
Hi, thank you for the detailed Manual, but i got still one (for me very important) question.
I got several USB-Sticks with the Phison 2303 (2251-03) Controller, most of them are:
Manufacturer: TOSHIBA
Product: TransMemory Mx
Do i also have to take the two files “BN03V104M.BIN and FW03FF01V10753M_20130621.BIN”
or should i take other files cause i don’t have the same Stick u use ???
You wrote:”So open the folder Firmware PS2251-03 like shown here below and copy the files BN03V104M.BIN and FW03FF01V10753M_20130621.BIN”
I’m afraid of “damaging” the stick…. hope you can help me!!!!
——————————————————————————
Detailed Information of the Stick using FlashDriveInfoExtractor:
Volume: J:
Controller: Phison 2303 (2251-03)
Possible Memory Chip(s):
Toshiba TH58NVG8T2JTA20
Toshiba TH58TEG8T2JTA20
Toshiba TC58NVG7T2JTA00
Toshiba TC58TEG7T2JTA00
Memory Type: TLC
Flash ID: 983AA892 7657
Chip F/W: 02.08.53
Firmware Date: 2014-01-02
ID_BLK Ver.: 1.2.65.0
MP Ver.: MPALL v3.29.0C
VID: 0930
PID: 6545
Manufacturer: TOSHIBA
Product: TransMemory Mx
Query Vendor ID: TOSHIBA
Query Product ID: TransMemory Mx
Query Product Revision: PMAP
Physical Disk Capacity: 31212699648 Bytes
Windows Disk Capacity: 31191793664 Bytes
Internal Tags: 2Q6P-S74J
File System: FAT32
Relative Offset: 4032 KB
USB Version: 3.00 in 2.00 port
Declared Power: 300 mA
ContMeas ID: 76B0-02-00
Microsoft Windows 7 SP1 x64
Yes you must use the files BN03V104M.BIN and FW03FF01V10753M_20130621.BIN, it doesn’t matter if u have USB sticks from another manufacture then corsair as long as it is the Phison 2303 (2251-03) Controller your good to go! Also if you want to recover the USB Stick back to stock u can use my other guide http://www.pentestingshop.com/recover-a-usb-stick/
And thanks for the comment.
Good Luck using your ducky 🙂
Thank you for the fast response… finally my “RubberDucky” worked 🙂
But now i have the next Problem
I made only a TestScript.txt (inject.bin) to see if it works… and it did, after i made the “Real Script”…
now i have only Problems…
it’s not possible for me to inject the new Script (inject.bin)… so i read your Manual how to reset the USB-Stick -> http://www.pentestingshop.com/recover-a-usb-stick/
I guess i have to do that everytime when i want “upload” a new script “inject.bin” to the USB-Stick…
But i was too lazy to open the USB-Stick-Case… so i plugged the Stick in… wait until the Script has finished… the i set the Stick with CMD in BootMode (C:\fw\Psychson-master\tools\DriveCom.exe /drive=F /action=SetBootMode)
Then i started up “MPALL_F1_9000_v371_0A.exe”… then i clicked on Update, and it showed my Stick..
after that i created the settings exactly like you showed in your Manual…
(burner from C:\fw\fw_bn\BN03V104M.BIN)
(firmware from C:\fw\fw_bn\FW03FF01V10753M_20130621.BIN)
after that… i clicked on Start in “MPALL_F1_9000_v371_0A”
the LED of the Stick started Flashing all the time… after a while… it stopped blinking and the LED was ON all the Time, but the MPALL_F1_9000_v371_0A stopped working… nothing happend…
I waited about one Hour… but nothing goes on….
So i plugged out the Stick, made a restart… then i read a lot of Comments and so on… OK.. i had to open the USB-Stick Case
It’s a Toshiba TransMemory-MX 32GB… like on this Picture (https://cloud.githubusercontent.com/assets/9211112/4736506/0379b7bc-59ed-11e4-8bf6-c38cdf7b0d54.jpg)
So i connected the two Pins together and put it in the USB-Drive… nothing happens.. no DriveLetter… no USB-Device… nothing…
When i update in MPALL_F1_9000_v371_0A… nothing happens… no USB-Drive… nothing…
When i set it to BootMode over CMD… it workes… i can see the Stick in “MPALL” (but it tells me it only has 16GB, but it has 32), but when i try to Reset the Drive… it has Errors all the time…
now… my Stick won’t start the Ducky-Script… AND i can’t use it anymore…
Does anyone has an Idea what i can/try now…. (Throwing the Stick away is not what i wanna hear 🙂
i am glad to hear that flashing a ducky script worked out for you, and indeed for flashing another script u always need to reflash it back to original first. But about the problem u have with reflashing it back to stock seems strange! The only thing i think that can be the problem is that u have not the Phison chip but a Toshiba chip, isn’t there another chip on it on the other side?.. And did you keep shortening the pins while plugging in the USB Stick?
i have the same Error with the Corsair Memory CMFLS3-32GB Voyager LS. When i plug the USB inside Windows 10 has the same error in the Dervice manager.
Does your blog have a contact page? I’m having a tough
time locating it but, I’d like to shoot you an e-mail.
I’ve got some creative ideas for your blog you might be interested in hearing.
Either way, great site and I look forward to seeing it expand over time.
indeed i don’t have a contact page but you can always email me on pentestingshop@gmail.com and ideas are always welcome..Thanks in advance
Thank you for both the flash and restore guides…After a little bit of tinkering I got it to work…However, for some reason that I haven’t yet been able to figure out, my script only appears when inserted into a 2.0 usb port…I’m just wondering if this is a common issue or a problem with my firmware that I flashed?..The usb is a SanDisk Ultra 3.0 32gb with the proper Phison chip…I’m still playing around with it but any guidance is both welcomed and appreciated…Thanks again.
Hi there, I believe your web site might be having browser compatibility problems.
When I look at your website in Safari, it looks fine however when opening in I.E.,
it has some overlapping issues. I simply wanted to give you
a quick heads up! Besides that, great site!
thanks for the information i will definitely look into that!
Nice response in return of this question with genuine arguments and
explaining everything about that.
very cool, awesome
Volume: E:
Controller: Alcor AU6989SN-GT/AU6998SN-GT
Possible Memory Chip(s):
SanDisk SDTNQCAMA-016Gx2
SanDisk SDTNQCAMA-016G *2
Memory Type: TLC
Flash ID: 454CA892 7657
Flash CE: 2
Flash Channels: Single
Chip Code: 0xE512
Chip F/W: D82B
Group: 98
VID: 8564
PID: 1000
Manufacturer: JetFlash
Product: Mass Storage Device
Query Vendor ID: JetFlash
Query Product ID: Transcend 32GB
Query Product Revision: 8.07
Physical Disk Capacity: 31299993600 Bytes
Windows Disk Capacity: 31299989504 Bytes
Internal Tags: AZWR-S872
File System: NTFS
USB Version: 2.00
Declared Power: 200 mA
ContMeas ID: AFA3-04-00
Microsoft Windows 7 SP1 x64 Build 7601
————————————
http://www.antspec.com/usbflashinfo/
Program Version: 8.4.0.584
can I use it?
no u can not use that USB Stick only the Phison 2303 (2251-03) Controller
Microsoft Windows [Version 6.3.9600]
(c) 2013 Microsoft Corporation. All rights reserved.
C:\Windows\system32>java -jar c:\fw\ducky\duckencode.jar -i c:\fw\ducky\HelloWor
ld.txt -o c:\fw\ducky\inject.bin
Error on Line: 1
C:\Windows\system32>java -jar c:\fw\ducky\duckencode.jar -i c:\fw\ducky\HelloWor
ld.txt -o c:\fw\ducky\inject.bin
Error with input file!
Exception in thread “main” java.lang.reflect.InvocationTargetException
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at org.eclipse.jdt.internal.jarinjarloader.JarRsrcLoader.main(JarRsrcLoa
der.java:58)
Caused by: java.lang.NullPointerException
at Encoder.main(Encoder.java:111)
… 5 more
C:\Windows\system32>
How can I solve this problem ??
And I use
Volume: E:
Controller: SanDisk
Possible Memory Chip(s): Not available
VID: 0781
PID: 5576
Manufacturer: SanDisk
Product: Firebird USB Flash Drive
Query Vendor ID: SanDisk
Query Product ID: Cruzer Facet
Query Product Revision: 1.26
Physical Disk Capacity: 8004304896 Bytes
Windows Disk Capacity: 8004300800 Bytes
Internal Tags: 3Z4F-8CH3
File System: NTFS
USB Version: 2.00
Declared Power: 200 mA
ContMeas ID: 9509-01-00
Microsoft Windows 8.1 x64 Build 9600
————————————
http://www.antspec.com/usbflashinfo/
Program Version: 8.4.0.584
(+ I checked your shop but , that is stock now )
Did you run Command Prompt as a Administrator? And did you download the right java version?
Also check this line java -jar c:\fw\ducky\duckencode.jar -i c:\fw\ducky\HelloWor
ld.txt -o c:\fw\ducky\inject.bin (That u have the right filename, so that the file c:\fw\ducky\HelloWorld.txt is really HelloWorld with a capitalized H and W.)
I can use:
Volume: F:
Controller: Phison 2251-60
Possible Memory Chip(s):
Toshiba TC58NVG5T7FLA19
Memory Type: TLC
Flash ID: 98D79882 7655
Chip F/W: 02.0A.53
Firmware Date: 2010-12-09
MP Ver.: MPALL v3.13.0B
VID: 0930
PID: 6545
Manufacturer: Kingston
Product: DT 101 G2
Query Vendor ID: Kingston
Query Product ID: DT 101 G2
Query Product Revision: PMAP
Physical Disk Capacity: 3926949888 Bytes
Windows Disk Capacity: 2058338304 Bytes
Internal Tags: 2Q6P-S74Q
File System: FAT32
Relative Offset: 16 KB
USB Version: 2.00
Declared Power: 200 mA
ContMeas ID: 0629-05-00
Microsoft Windows 7 Build 7600
————————————
http://www.antspec.com/usbflashinfo/
Program Version: 8.4.0.585
Will the Twin Duck firmware work on bad usb for using it as a memory as well as a keystroke injection tool for like this payload
https://forums.hak5.org/index.php?/topic/29002-payload-wi-fi-password-stealer-saving-to-sd/
Dont know,i guess i have to try it out
Build.bat
“sdcc” is not recognized as an internal or external command, operable program or batch file”
These problems turns out why?
My files here
C:\fw\Psychson-master\firmware
C:\Program Files\SDCC
Make sure all the files are in the exact same place as in my tutorial, and also check if this is checked at the end of the installation of SDCC
also if you already did run build.bat and there is a Bin directory in the folder u should remove the Bin folder and run it again..And try to run build.bat as an Administrator, so right click on the file and select Run as Administrator. Do this for all the command prompts u open..Hope u can get this solved
I have the same problem and I can’t resolve it.
Pls help me
*** Building main.c…
‘C:\Program’ is not recognized as an internal or external command,
operable program or batch file.
at 1: warning 190: ISO C forbids an empty source file
*** There were errors! ***
*** Done.
Why Noooo :/ I did what you say but I can not
Very Good Tutorial, I have aa Problum, i have make my usb as per show you in tutorial . And i Dn’t face any problum or any error during making rubber USB. but after complete when i unplugged and plug again its can not show any thing. or not showing in my PC.
Did you use a Corsair stick like i did? And if so first try to recover the USB Stick back to normal like shown here Recover USB Stick and then start back from this step Compiling Done and check if u made the HelloWorld.txt correct using the duckencoder
Yes i have same USB that you have. but just color difference you have black USB and i have White USB. And i have perform every singel step like you perform. Now m trying to recover but its nothing showing in this software , I have connect my USB with Port but in Recovery software nothing shows my USB. But in Recovery artical you mention there “Short Pin” . I do not know how to Shortpin. And which pins i should short?
You indeed need to short the pins like shown on the picture
it is the second and third pin from the corner like shown on the picture..You best let the recover software open and keep the pins shorted for a wile while plugging it in..U should then see the usb stick appearing in the software..Hope this helps u
During the shot pin i have break this pin. and that time its shows in software, and m trying to format but its stop and now after breaking pin its show error “Driver : D: Mode 255 ID Error 0001”
What do you mean with u have broke the pin? On the USB stick ? And i never had that error before..The format could take some time, but normally afterwards when u replug the USB Stick it should be back normal.
Yes, i have break pin no 2. when i trying shorting pins by mistake. and when i applying format it takes too much time and i unplugged. after re plug its shows error like that
“Driver : D: Mode 255 ID Error 0001”
And when i open software for Recovery its does not showing any thing. But when i click on Update its generate QC.ini file which write below,
[PenDriveMP]
IC Type=PS2251-03
[Parameter Mark]
Parameter Type=F1_MP_21
[Customize Info]
USB VID=0x13FE
USB PID=0x5200
String Product Name=USB DISK 3.0
String Manufacturer Name=Toshiba
Inquiry Version=PMAP
[Configuration]
Reset Serial Number=0
Partition Boundary MB=999999999
[TestItemOption]
Do Preformat Test=1
[Extra]
Mode=3
[Misc]
Privacy Volume Label=USB DISK
Wafer Erase All=1
set1667=0x00
[Advance]
FC1=0xFF
FC2=0x01
CheckUSBConnectorType=0x22
[Firmware]
ISP=1
Burner File=BN03V104M.BIN
Firmware Name=FW03FF01V10053M.BIN
This is normal,just do what i just told u..Shorten then pins while pluggin it in..It is not that easy to do, but after a couple off tries it should go.
you can here my error
here is mmy usb that i had broke a pin
from what i see here on the picture it is not the same chip as i have, u told me u had the same stick as mine only in white..But if i look close at your picture is see that on your chip it says TOSHIBA .. That’s why u cant recover the stick with my software..U will need the recover software for your stick..I can maybe help if you give me all the things that are written on the Toshiba chip..
Yes dear yesterday i had buy new one usb suchas i buy before. I have uploaded pic. Now i follow your manual tutorial download all software and i create as create you. No error face during installation its same like your tutorial. But when i unplugged and replug its nothing shows. And after that i checked my system driver its shows yellow mark and not installed when m trying to install its shows me error.
This is my USB

And thats Driver error, You can see below
And when m trying to upload/ or reinstall its gives me error. see below
Try this please …
To restore your Toshiba USB Stick to a flash disk you can do the following steps:
1. Bring it Into Boot Mode
2. Download and extract: MPALL_v3.63_0D
3. Create QC.ini with following content:
[PenDriveMP]
IC Type=PS2251-03
[Parameter Mark]
Parameter Type=F1_MP_21
[Customize Info]
USB VID=0x13FE
USB PID=0x5200
String Product Name=USB DISK 3.0
String Manufacturer Name=Toshiba
Inquiry Version=PMAP
[Configuration]
Reset Serial Number=0
Partition Boundary MB=999999999
[TestItemOption]
Do Preformat Test=1
[Extra]
Mode=3
[Misc]
Privacy Volume Label=USB DISK
Wafer Erase All=1
set1667=0x00
[Advance]
FC1=0xFF
FC2=0x01
CheckUSBConnectorType=0x22
[Firmware]
ISP=1
Burner File=BN03V101.BIN
Firmware Name=FW03FF01V10053M.BIN
4. Start: MPALL_F2_v363_0D.exe -> Click on Start
5. Unplug the stick after finishing
6. Mode 3 will use the complete storage (Windows will see only a few MB Storage on the first partition of the stick. I used cfdisk from ubuntu to erase the first partition and create one big partition. You can also use the Windows Tool: Restore-v3.13.0.0.rar to restore the storage. After that you can format it with windows.)
7. Now you have a brand new Flash Stick with 14,44 GB Memory free 🙂
YES dear i have checked it. But it can not give me permission for modifation. When i pluggin its give me error that i have mention already. I think its have no solution because it’s pin break. But i have Buy another USB but it’s also still not work. I have windows 10 and i checked 2 laptops both are giving me same error. Driver not installed. Your USB work on Windows 10?
Yes my Usb stick works under Windows 10, but it’s also another stick then the one u use!..I tried looking for the fault u got but cant same to find the right solution..I would like to help to get your usb stick working again, but since i don’t own that kind off usb stick that u use i cant try it for myself..But maybe you can find the right solution here LINK
hola mi pregunta es donde se guardaran todas la informacion que se puedan conseguir
no puedes guardarlo en una memoria USB , pero u puede guardarlo a distancia ..
Lo siento por la mala traducción
Which USB that work under windows 10, But afterall My Payload hello world works on windows7 perfectly. And now I am able to remove payload and get back orignal USB. Thank Dear of all things.
1 thing i wana ask you, can we put exe with payload , for example if we put usb then exe will run.?
This USB Stick works for sure under Windows 10
And i am glad u finally got it all working.
The question about if you can put a exe payload on to the USB Stick is NO.
But it’s much better to put a powershell exploit onto the BadUSB
You can then make a powershell script to download your exe from somewhere.
But most virus scanners or anti-malware software will block that, unless you first set a script to disable it all
look here for the powershell script
LINK
Thank You, But i am not understand how to do that, There on 3 Different scripts i do not know which is better one. I do not know how to use it, i have seen many videos about using Powershell script, But They shows some different methods, If You have a time can you please make video about Powershell Script, Or How to Use Powershell Script in Rubber Ducky.
Thanks
No problem, and i will sure keep it in mind to make a video some day.
But i am very busy now working on the launch off the new OsmocomBB guides.
And planning on selling those phones
hello, i want to buy this one.
How can I buy this USB?
Please send an email to me.
blackornish@gmail.com
Sorry,the usb stick is currently not available,im looking for some new supported sticks since u cant buy the corsair anymore.
hi guys , i have a some questions , but , every time I want to send the payload in the ducky usb , I must to recover a usb stick?????????
hi guys , i have a some questions , but , every time I want to send the payload in the ducky usb , I must to recover a usb stick?
Yes u indeed always need to flash it back to stock,with a real usb rubber ducky u have a micro sd card slot where you can put your payloads on to change them..But since this is a normal USB Stick u need to do it manualy.
Worth buying one for this reason alone. I wish I saw this before I went through the entire process for a stupid HelloWorld file!! I would have put all the payloads on the USB I thought were cool right off the bat!
Under “C: \ fw \ Psychson-master \ tools” I created “DriveCom.exe”, “EmbedPayload.exe” and “Injector.exe”.
I created also “C: \ fw \ Psyschson-master \ firmware \ bin \ bn.bin”
Next, I secured the firmware from a USB stick and injected in this my “Hello World inject.bin”
After that I wanted to copy the infected firmware back on the stick, but I get an error every time after I added the stick in the boot mode,
so that it is not possible for me to use the custom firmware.
Terminal says:
C:\Windows\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=F /action=SetBootMode
Action specified: SetBootMode
C:\Windows\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=F /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN
Action specified: SendExecutable
FATAL: System.InvalidOperationException: Header not accepted
bei DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:Zeile 256.
bei DriveCom.PhisonDevice.TransferFile(Byte[] data) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:Zeile 238.
bei DriveCom.Startup._ExecuteImage(String fileName) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:Zeile 403.
bei DriveCom.Startup.Main(String[] args) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:Zeile 109.
C:\Windows\system32>
……so help would be nice!
Try unplugging and entering boot mode again. It is possible to enter boot mode by shorting the pins yet disrupting future communication with the NAND chip, and it looks like that may be what happened here.
I have the exact Same problem I foolowed the instructions and i was able to copy paste and execute the first 3 command lines but i got the same errors as “dak47” when i am tried
“c:\fw\Psychson-master\tools\DriveCom.exe /drive=E /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN” i get the same errors as “dak47” I havent tried to shorten the pins. Anyother solution? thank you so much for this great guide you have done a great job.
any lack with your problem? i have the same problem!
mee too
I am haveing trouble with the final step does anyone know how to resolve this?
C:\Users\Thomas>c:\fw\Psychson-master\tools\DriveCom.exe /drive=D /action=SendFirmware /burner=c:\fw\fw_bn\BN03V104M.BIN /firmware=c:\fw\Psychson-master\firmware\bin\fw.bin
Action specified: SendFirmware
Gathering information…
Reported chip type: 2302
Reported chip ID: 2C-A4-E5-3C-A5-00
Reported firmware version: 1.01.10
Mode: Burner
Rebooting…
Sending firmware…
FATAL: System.InvalidOperationException: Header not accepted
at DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) in C:\fw\Psychson-master\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 256
at DriveCom.Startup._RunFirmware(String fileName) in C:\fw\Psychson-master\Psychson-master\DriveCom\DriveCom\Startup.cs:line 427
at DriveCom.Startup._SendFirmware() in C:\fw\Psychson-master\Psychson-master\DriveCom\DriveCom\Startup.cs:line 378
at DriveCom.Startup.Main(String[] args) in C:\fw\Psychson-master\Psychson-master\DriveCom\DriveCom\Startup.cs:line 114
Is see in the information u posted that is says Reported chip type: 2302 this cannot work!
Only with a Phison 2303
we cannot just change the hello.txt file to change the script ?
Hey just wondering if these usb’s will work
Phison 2251-61
Phison 2251-67
No, it only works with a Phison 2251-03 nand chipset
When I execute : java -jar c:\fw\ducky\duckencode.jar -i c:\fw\ducky\HelloWorld.txt -o c:\fw\ducky\inject.bin I get an error can you please help me
C:\Windows\system32>java -jar c:\fw\ducky\duckencode.jar -i c:\fw\ducky\HelloWor
ld.txt -o c:\fw\ducky\inject.bin
Error with input file!
Exception in thread “main” java.lang.reflect.InvocationTargetException
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at org.eclipse.jdt.internal.jarinjarloader.JarRsrcLoader.main(JarRsrcLoa
der.java:58)
Caused by: java.lang.NullPointerException
at Encoder.main(Encoder.java:111)
… 5 more
Have u installed Java Runtime Environment 7 JRE? and the SDCC (Small Device C Compiler) ?
Some one help?!?
Microsoft Windows [Version 10.0.14393]
(c) 2016 Microsoft Corporation. All rights reserved.
C:\WINDOWS\system32>java -jar c:\fw\ducky\duckencode.jar -i c:\fw\ducky\HelloWorld.txt -o c:\fw\ducky\inject.bin
Error with input file!
Exception in thread “main” java.lang.reflect.InvocationTargetException
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at org.eclipse.jdt.internal.jarinjarloader.JarRsrcLoader.main(JarRsrcLoader.java:58)
Caused by: java.lang.NullPointerException
at Encoder.main(Encoder.java:111)
… 5 more
Check if u installed correctly installed Java JRE..Or add Pentestingshop on facebook and chat with me..Maybe i can take a look myself using teamviewer.
Hi thanks for your good tutorial.
I have a Toshiba usb by ( Phison 2251-67 ) controller.
Is it work in this usb too?
thanks.
AmirWizard no u can only do it with a Phison 2251-03 (2303) nand chipset! Do not try to do it with another controller or your usb can be broken beyond repair :p
Hi Thanks for your good tutorial,I got a problem in fourth command guide:
c:\fw\Psychson-master\tools\DriveCom.exe /drive=E /action=DumpFirmware /firmware=c:\fw\currentfw.bin
Here the picture of error: http://uupload.ir/files/we38_error.png
what’s the problem?what should I do?
thanks.
did you also tried it with a Phison 2251-03 (2303)? Cause in your previous comment you talked about a Phison 2251-67
Hello, can i use this USB?
Volume: E:
Controller: SSS 6698 BB
Possible Memory Chip(s):
Toshiba TC58NVG6D2GTA00
Memory Type: MLC
Flash ID: 98DE9482 7656
Flash CE: 1
VID: 0951
PID: 1665
Manufacturer: Kingston
Product: DataTraveler 2.0
Query Vendor ID: Kingston
Query Product ID: DataTraveler 2.0
Query Product Revision: 1.00
Physical Disk Capacity: 7747397632 Bytes
Windows Disk Capacity: 7746347008 Bytes
Internal Tags: 386H-QAB4
File System: NTFS
Relative Offset: 1024 KB
USB Version: 2.00
Declared Power: 100 mA
ContMeas ID: 4379-03-00
Microsoft Windows 10 x64 Build 10586
————————————
http://www.antspec.com/usbflashinfo/
Program Version: 8.7.0.597
No u cannot use that USB STICK, only one with a Phison 2251-03 (2303) nand Chipset or controller.
Thanks for such a great tutorial. I was able to get this working on the first try. Hard to find USBs any more with the right chip but I lucked out.
I have a question that has been nagging me…. This applies to an actual RubberDucky as well as the one I just made.
When I plug the device into a computer for the first time, I get the “Installing Device” message in task manager and the payload doesn’t execute. If, after that, I unplug the usb stick and reinsert it, it runs fine.
Is there any way around this?
Thanks!
Great that it worked out for you! I see many people are struggling to get it working..I also didn’t have any problem with it..But about your question involving a solution for the new device, i can only say that there is no way around this..On every Computer u plug it in the first time u need to let the device install first as a hid controller..But maybe a tip is try always to plug it in a USB 3.0 port(blue) It will work much faster
*** Building main.c…
‘C:\Program’ is not recognized as an internal or external command,
operable program or batch file.
at 1: warning 190: ISO C forbids an empty source file
*** There were errors! ***
*** Done.
Why i am seeing this ?
What command did you run exactly?
when i clicked build.bat file
hello there guys. I don;t own a Rubber Ducky, instead i found some usb sticks with the proper Phison chip and managed to “cook” a BadUsb. Ofc i am using the (latest) duckencoder.jar to make the inject.bin file. Everything worked out fine. The problem is that the payload is not running under Windows … Tried both with the .jar and the python method. No matter what i try it’s not working, (tried WINDOWS r, GUI r, CONTROL ESCAPE etc)
Here is the script i am using for the inject.bin file
DELAY 5000
WINDOWS r
DELAY 1000
STRING notepad
DELAY 1000
ENTER
DELAY 1000
STRING Hello World!!!
ENTER
When i plug in the usb nothing happens. When i boot with Kali Linux and open a terminal i can see it’s working because words like “r” , “notepad” and “Hello World” are appearing
Any help ? Thoughts on the matter ?
Thanks in advance !!
Hi, the problem is u use the old scripting language instead of WINDOWS u need to use GUI
so your script should be
DELAY 5000
GUI r
DELAY 1000
STRING notepad
DELAY 1000
ENTER
DELAY 1000
STRING Hello World!!!
ENTER
i mentioned in my original post this “No matter what i try it’s not working, (tried WINDOWS r, GUI r, CONTROL ESCAPE etc)” . None of them works. Any other thoughts ? I own a Verbatim Store n Go V3 8GB
Did you try it with the online ducky encoder? https://ducktoolkit.com/encoder/ also make sure u set the right keyboard language and it should generate i good *.bin file
i did that too mate… i really don’t know what the problem is, really. i think i read somewhere that on win10 they fixed the badusb issue. Maybe it is “fixed” on my win 8.1 too ? Maybe no matter what i try it won’t work due to that “fix” ?
i can tell u for sure that it’s not a problem with Windows 10 or Windows 8.1 cause i used it on many different Computers using Windows 10 or 8.1
Did you try it already on another computer? Instead of in Kali Linux ?
my girlfriends’ laptop with win 8.0, not working … i am disappointed and sad that i cannot make it work !! i run out of ideas as well… i have Zemana AntiMalware and Windows Defender ON, can that be the problem ? it shouldn’t thought… Any ideas ?
A AntiMalware or Windows Defender shouldn’t give any problem since the USB Stick emulates a Keyboard and the computer thinks the user does these things!
can we talk more private and faster ? facebook ? skype ? email ? whatever ? thanks
You can add Pentestingshop on Facebook and u can then send me a message..So that we then maybe can interact using Teamviewer
if you are interested, check this out. it’s like a badusb2 or something https://github.com/withdk/badusb2-mitm-poc
Thanks,looks nice but sadly only a proof of concept and not completed yet
I need help ;(
I have this usb stick.
“Volume: F:
Controller: Phison PS2307
Possible Memory Chip(s): Not available
Flash ID: 98DE88A3 7251
Chip F/W: 02.15.55
Firmware Date: 2015-07-22
ID_BLK Ver.: 1.3.0.0
MP Ver.: MPALL v3.34.00
VID: 0930
PID: 6545
Manufacturer: TOSHIBA
Product: TransMemory Mx
Query Vendor ID: TOSHIBA
Query Product ID: TransMemory Mx
Query Product Revision: PMAP
Physical Disk Capacity: 7801405440 Bytes
Windows Disk Capacity: 7788838912 Bytes
Internal Tags: 2Q6P-SX5L
File System: FAT32
Relative Offset: 4032 KB
USB Version: 3.00 in 2.00 port
Declared Power: 300 mA
ContMeas ID: 5A83-07-00
Microsoft Windows 10 x64 Build 14393
————————————
http://www.antspec.com/usbflashinfo/
Program Version: 8.7.0.597″
and i try to brun my firmware but i don´t work…
”
C:\WINDOWS\system32>d:\fw\Psychson-master\tools\DriveCom.exe /drive=F /action=SendFirmware /burner=d:\fw\fw_bn\BN07V106M.BIN /firmware=d:\fw\Psychson-master\firmware\bin\fw.bin
Action specified: SendFirmware
Gathering information…
Reported chip type: 2307
Reported chip ID: 98-DE-88-A3-72-51
Reported firmware version: 1.03.10
Mode: Burner
Rebooting…
Sending firmware…
FATAL: System.InvalidOperationException: Header not accepted
bei DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) in D:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:Zeile 256.
bei DriveCom.Startup._RunFirmware(String fileName) in D:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:Zeile 427.
bei DriveCom.Startup._SendFirmware() in D:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:Zeile 378.
bei DriveCom.Startup.Main(String[] args) in D:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:Zeile 114.
”
what can i do?
U can not do it using a USB Stick that has a Phison PS2307 nand chipset, even if u try to use the right burner for a Phison PS2307, u will need a USB Stick with a Phison 2303 (2251-03) nand chipset
Can u give a link to the right java version? cause in the tutorial u typed java Runtime Environment 7 but in the picture its saying 8…
Yes correct,i made the text and a couple months later edited the screenshots..But good noticed..But you can just download and install version 8 it’s backwards compatible…LINK
Hi!
What can i do to solve the “Error on Line: 6” when i enter the first command?
Line 6 of my script is:
“CTRL-SHIFT ENTER”
Should i replace it with something else?
On what first command?
can i setup the rubber ducky on windows xp? and do you know any sandisk flash drives with the Phison 2303 (2251-03)?
U can use the Rubber Ducky on every type of OS, since it’s you who writes the code that it types out.
And no i cannot tell u anymore what sandisk flash drive has the Phison 2203 nand chipset, since most of them manufactures changed to the Phison 2207 nand chip
C:\Windows\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=I /action=Se
ndExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN
Action specified: SendExecutable
FATAL: System.InvalidOperationException: Header not accepted
at DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) in
c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 256
at DriveCom.PhisonDevice.TransferFile(Byte[] data) in c:\fw\Psychson-master\D
riveCom\DriveCom\PhisonDevice.cs:line 238
at DriveCom.Startup._ExecuteImage(String fileName) in c:\fw\Psychson-master\D
riveCom\DriveCom\Startup.cs:line 403
at DriveCom.Startup.Main(String[] args) in c:\fw\Psychson-master\DriveCom\Dri
veCom\Startup.cs:line 109
i have problem can you help me
Paste the information you got with GetFlashInfo in front off the post please, so i know u have a good USB Stick to begin with
I am getting this error when trying to set action to send exec
C:\WINDOWS\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=E /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN
Action specified: SendExecutable
FATAL: System.InvalidOperationException: Header not accepted
at DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 256
at DriveCom.PhisonDevice.TransferFile(Byte[] data) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 238
at DriveCom.Startup._ExecuteImage(String fileName) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 403
at DriveCom.Startup.Main(String[] args) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 109
any help plz 🙂
Hello i keep getting errors trying to put usb in executable mode some help will be appreciated 🙂
C:\WINDOWS\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=E /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN
Action specified: SendExecutable
FATAL: System.InvalidOperationException: Header not accepted
at DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 256
at DriveCom.PhisonDevice.TransferFile(Byte[] data) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 238
at DriveCom.Startup._ExecuteImage(String fileName) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 403
at DriveCom.Startup.Main(String[] args) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 109
Are you sure u also are using a good USB Stick?
Always let me know that first before posting error’s so paste the information you got with GetFlashInfo in front off the post please
Hi, I got a problem with the last step when entering “c:\fw\Psychson-master\tools\DriveCom.exe /drive=E /action=SendFirmware /burner=c:\fw\fw_bn\BN03V104M.BIN /firmware=c:\fw\Psychson-master\firmware\bin\fw.bin” it shows me the next lines:
Action specified: SendFirmware
Gathering information…
Reported chip type: 2307
Reported chip ID: 98-3A-98-A3-76-51
Reported firmware version: 2.15.55
Mode: Firmware
Switching to boot mode…
FATAL: System.InvalidOperationException: DeviceIoControl failed: 0079
en DriveCom.PhisonDevice._SendCommand(SafeFileHandle handle, Byte[] cmd, Byte[] data, Int32 bytesExpected) en C:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:línea 365
en DriveCom.PhisonDevice.SendCommand(Byte[] cmd, Byte[] data) en C:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:línea 314
en DriveCom.PhisonDevice.SendCommand(Byte[] cmd) en C:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:línea 304
en DriveCom.PhisonDevice.JumpToPRAM() en C:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:línea 228
en DriveCom.Startup._ExecuteImage(String fileName) en C:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:línea 404
en DriveCom.Startup._SendFirmware() en C:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:línea 375
en DriveCom.Startup.Main(String[] args) en C:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:línea 114
Thanks for all
you are using a wrong USB Stick you have a Phison 2307 nand chip
i see this on the 6th line you posted here
Reported chip type: 2307
So it’s a no go for that stick
Can i use this USB?
Controller: Phison 2251-68
Possible Memory Chip(s):
Hynix H27UCG8T2A
Hynix H27UCG8T2ATR
Hynix H27UCG8T2ATRx2
Memory Type: MLC
Flash ID: ADDE94DA 74C4
Chip F/W: 01.03.10
Firmware Date: 2013-12-19
ID_BLK Ver.: 1.2.56.0
MP Ver.: MPALL v3.28.0B
VID: 0951
PID: 1665
Manufacturer: Kingston
Product: DataTraveler 2.0
Query Vendor ID: Kingston
Query Product ID: DataTraveler 2.0
Query Product Revision: PMAP
Physical Disk Capacity: 7864320000 Bytes
Windows Disk Capacity: 7855996928 Bytes
Internal Tags: 2Q6P-SX5K
File System: FAT32
Relative Offset: 4032 KB
USB Version: 2.00
Declared Power: 200 mA
ContMeas ID: DC08-03-00
no sorry, only with the Phison 2251-03 (2303) which will be hard to find anymore these day’s since the suppliers all changed them to the Phison PS2307 nand chipset 🙁
Damnit, I thought I was close 🙁
Thanks.
hello,
great how-to, I’m stuck at this point:
SET ACTION TO SEND EXECUTABLE USING BURNER IMAGE
c:\fw\Psychson-master\tools\DriveCom.exe /drive=E /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN
And I receive these errors:
C:\>c:\fw\Psychson-master\tools\DriveCom.exe /drive=E /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN
Action specified: SendExecutable
FATAL: System.InvalidOperationException: Header not accepted
at DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 256
at DriveCom.PhisonDevice.TransferFile(Byte[] data) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 238
at DriveCom.Startup._ExecuteImage(String fileName) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 403
at DriveCom.Startup.Main(String[] args) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 109
Flash Drive Information Extractor tool, reported the below information about mine usb thumb:
Volume: E:
Controller: Phison 2303 (2251-03)
Possible Memory Chip(s):
Toshiba TC58NVG6D2GTA00
Memory Type: MLC
Flash ID: 98DE9482 76D6
Chip F/W: 05.04.10
Firmware Date: 2016-04-12
ID_BLK Ver.: 1.4.3.0
MP Ver.: MPALL v5.3.0B
VID: 18A5
PID: 0243
Manufacturer: Verbatim
Product: STORE N GO
Query Vendor ID: Verbatim
Query Product ID: STORE N GO
Query Product Revision: PMAP
Physical Disk Capacity: 7746879488 Bytes
Windows Disk Capacity: 7738507264 Bytes
Internal Tags: 2P2P-SX3J
File System: FAT32
Relative Offset: 4032 KB
USB Version: 2.00
Declared Power: 126 mA
ContMeas ID: 0941-01-00
Microsoft Windows 7 SP1 x64 Build 7601
————————————
http://www.antspec.com/usbflashinfo/
Program Version: 8.7.0.597
Any helps are more than welcome, cheers 🙂
Error with input file!
Exception in thread “main” java.lang.reflect.InvocationTargetException
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at org.eclipse.jdt.internal.jarinjarloader.JarRsrcLoader.main(JarRsrcLoa
der.java:58)
Caused by: java.lang.NullPointerException
at Encoder.main(Encoder.java:111)
how do i fix it????????
always post your info from GetFlashinfo first,to make sure u have a Phison 2251-03
Hi I have a USB with a prison 2251-33 (2233) would this work ?
Thanks
no only the Phison 2251-03
Hello I had a problem at the final step (command).
First time i had the same error but when i tried to execute :
c:\fw\Psychson-master\tools\DriveCom.exe /drive=L /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN
After I do the PinsToShortUponPlugInForBootMode
I put a knife into the first and second pin and connect the usb.
The Windows find new driver and installed
Now my usb is in BootMode
This is my memoy stik info now :
Volume: L:
Controller: Phison 2302 (2251-02)
Possible Memory Chip(s): Not available
Chip F/W: 01.01.10
Firmware Date: 2012-10-22
VID: 13FE
PID: 5200
Manufacturer: Phison
Product: 2303 FW BURNER
Query Vendor ID:
Query Product ID: 2303 PRAM
Query Product Revision: 1.00
Physical Disk Capacity: 0 Bytes
Windows Disk Capacity: 0 Bytes
Internal Tags: 2RAF-AAC3
USB Version: 2.00
Declared Power: 100 mA
ContMeas ID: C8FC-11-00
Microsoft Windows 8.1 x64 Build 9600
————————————
http://www.antspec.com/usbflashinfo/
Program Version: 8.7.0.597
And this is my command promt with Admin Rights
C:\Windows\system32>java -jar c:\fw\ducky\duckencode.jar -i c:\fw\ducky\HelloWorld.txt -o c:\fw\ducky\inject.bin
C:\Windows\system32>c:\fw\Psychson-master\tools\EmbedPayload.exe c:\fw\ducky\inject.bin c:\fw\Psychson-master\firmware\bin\fw.bin
File updated.
C:\Windows\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=L /action=SetBootMode
Action specified: SetBootMode
C:\Windows\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=L /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN
Action specified: SendExecutable
C:\Windows\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=L /action=DumpFirmware /firmware=c:\fw\currentfw.bin
Action specified: DumpFirmware
C:\Windows\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=L /action=SendFirmware /burner=c:\fw\fw_bn\BN03V104M.BIN /firmware=c:\fw\Psychson-master\firmware\bin\fw.bin
Action specified: SendFirmware
Gathering information…
Reported chip type: 2302
Reported chip ID: 98-3A-94-93-76-51
Reported firmware version: 1.01.10
Mode: Burner
Rebooting…
Sending firmware…
FATAL: System.InvalidOperationException: Header not acceptedat DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) in
c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 256 at DriveCom.Startup._RunFirmware(String fileName) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 427 at DriveCom.Startup._SendFirmware() in
c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 378 at DriveCom.Startup.Main(String[] args) in
c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 114
C:\Windows\system32>
Now it works till the last command like u see.
What can i do to make it work ?
Can someone help me ?
U are using a wrong USB Stick only a Phison 2251-03 will work
hello ,
I have a error :
C:\WINDOWS\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=G /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN
Action specified: SendExecutable
FATAL: System.InvalidOperationException: DeviceIoControl failed: 0006
à DriveCom.PhisonDevice._SendCommand(SafeFileHandle handle, Byte[] cmd, Byte[] data, Int32 bytesExpected) dans c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:ligne 365
à DriveCom.PhisonDevice.SendCommand(Byte[] cmd, Byte[] data) dans c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:ligne 314
à DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) dans c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:ligne 246
à DriveCom.PhisonDevice.TransferFile(Byte[] data) dans c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:ligne 238
à DriveCom.Startup._ExecuteImage(String fileName) dans c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:ligne 403
à DriveCom.Startup.Main(String[] args) dans c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:ligne 109
when i write ” c:\fw\Psychson-master\tools\DriveCom.exe /drive=G /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN” in my CMD I have this error, i don’t understand. Can i have help please?
sorry for the spelling but I’m french….
TANKS
The drive letter is correct.
What USB Stick did u use?
And did you check the nand chip using GetFlashInfo?
Or try to open the USB Stick gently and read what’s on the smallest chip
it should say Phison 2251-03 (2303)
Let me know that first
Kingston DT Ultimate G3 use Phison:
Controller: Phison 2303 (2251-03)
Possible Memory Chip(s): Not available
Flash ID: ********
Chip F/W: 01.12.10
Firmware Date: 2014-08-07
ID_BLK Ver.: 1.2.84.0
MP Ver.: MPALL v3.31.0C
VID: 0951
PID: 1697
Manufacturer: Kingston
Product: DT Ultimate G3
Query Vendor ID: Kingston
Query Product ID: DT Ultimate G3
Query Product Revision: PMAP
Physical Disk Capacity: 62948114432 Bytes
Windows Disk Capacity: 62881038336 Bytes
Internal Tags: *******
File System: FAT32
Relative Offset: 46496 KB
USB Version: 3.00 in 2.00 port
Declared Power: 300 mA
ContMeas ID: ******
Microsoft Windows 7 SP1 x64 Build 7601
————————————
http://www.antspec.com/usbflashinfo/
Program Version: 8.8.0.600
C:\fw>c:\fw\Psychson-master\tools\DriveCom.exe /drive=E /action=SendFirmware /bu
rner=c:\fw\fw_bn\BN03V104M.BIN /firmware=c:\fw\Psychson-master\firmware\bin\fw.b
in
Action specified: SendFirmware
Gathering information…
Reported chip type: 2302
Reported chip ID: 98-3A-A4-93-7A-50
Reported firmware version: 1.01.10
Mode: Burner
Rebooting…
Sending firmware…
FATAL: System.InvalidOperationException: Header not accepted
at DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) in
c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 256
at DriveCom.Startup._RunFirmware(String fileName) in c:\fw\Psychson-master\Dr
iveCom\DriveCom\Startup.cs:line 427
at DriveCom.Startup._SendFirmware() in c:\fw\Psychson-master\DriveCom\DriveCo
m\Startup.cs:line 378
at DriveCom.Startup.Main(String[] args) in c:\fw\Psychson-master\DriveCom\Dri
veCom\Startup.cs:line 114
weird that it say’s Reported chip type: 2302 cause in your previous post it says Controller: Phison 2303 (2251-03)..
But if it detects a 2302 it will not work.
can u deliver the usb to korea??
is it able to run exe file when i just plug the usb to computer??
no sorry i dont ship to korea
And i cant deliver the usb sticks anymore since all the nand chipsets changed
Also no it dosent work like that,it uses the duckencoder
HELP! I am at the step where we have to set the usb stick to boot mode and i keep getting the same error. It worked once all the way until i had to send the firmware once.
Error log for set to boot mode:
C:\WINDOWS\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=G /action=SetBootMode
Action specified: SetBootMode
FATAL: System.InvalidOperationException: DeviceIoControl failed: 0006
at DriveCom.PhisonDevice._SendCommand(SafeFileHandle handle, Byte[] cmd, Byte[] data, Int32 bytesExpected) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 365
at DriveCom.PhisonDevice.SendCommand(Byte[] cmd, Byte[] data) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 314
at DriveCom.PhisonDevice.SendCommand(Byte[] cmd) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 304
at DriveCom.PhisonDevice.JumpToBootMode() in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 233
at DriveCom.Startup.Main(String[] args) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 124
Error log for send executable:
C:\WINDOWS\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=G /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN
Action specified: SendExecutable
FATAL: System.InvalidOperationException: DeviceIoControl failed: 0006
at DriveCom.PhisonDevice._SendCommand(SafeFileHandle handle, Byte[] cmd, Byte[] data, Int32 bytesExpected) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 365
at DriveCom.PhisonDevice.SendCommand(Byte[] cmd, Byte[] data) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 314
at DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 246
at DriveCom.PhisonDevice.TransferFile(Byte[] data) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 238
at DriveCom.Startup._ExecuteImage(String fileName) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 403
at DriveCom.Startup.Main(String[] args) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 109
Error log for dump firmware:
C:\WINDOWS\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=G /action=DumpFirmware /firmware=c:\fw\currentfw.bin
Action specified: DumpFirmware
FATAL: System.InvalidOperationException: DeviceIoControl failed: 0006
at DriveCom.PhisonDevice._SendCommand(SafeFileHandle handle, Byte[] cmd, Byte[] data, Int32 bytesExpected) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 365
at DriveCom.PhisonDevice.SendCommand(Byte[] cmd, Int32 bytesExpected) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 295
at DriveCom.Startup._DumpFirmware(String fileName) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 341
at DriveCom.Startup.Main(String[] args) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 99
Error log for send firmware:
C:\WINDOWS\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=G /action=SendFirmware /burner=c:\fw\fw_bn\BN03V104M.BIN /firmware=c:\fw\Psychson-master\firmware\bin\fw.bin
Action specified: SendFirmware
Gathering information…
FATAL: System.InvalidOperationException: DeviceIoControl failed: 0006
at DriveCom.PhisonDevice._SendCommand(SafeFileHandle handle, Byte[] cmd, Byte[] data, Int32 bytesExpected) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 365
at DriveCom.PhisonDevice.SendCommand(Byte[] cmd, Int32 bytesExpected) in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 295
at DriveCom.PhisonDevice.RequestVendorInfo() in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 140
at DriveCom.PhisonDevice.GetChipType() in c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 170
at DriveCom.Startup._GetInfo() in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 384
at DriveCom.Startup._SendFirmware() in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 365
at DriveCom.Startup.Main(String[] args) in c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 114
Usb info:
Volume: F:
Controller: Phison 2251-61 (2261)
Possible Memory Chip(s):
Toshiba TC58NVG6D2GTA00
Memory Type: MLC
Flash ID: 98DE9482 7656
Chip F/W: 03.08.10
Firmware Date: 2012-03-07
ID_BLK Ver.: 1.1.88.0
MP Ver.: MPALL v3.60.00
VID: 18A5
PID: 3E23
Manufacturer: Verbatim
Product: STORE N GO
Query Vendor ID: Verbatim
Query Product ID: STORE N GO
Query Product Revision: 5.00
Physical Disk Capacity: 8006926336 Bytes
Windows Disk Capacity: 7986020352 Bytes
Internal Tags: 2P2P-SX3L
File System: FAT32
Relative Offset: 4032 KB
USB Version: 2.00
Declared Power: 200 mA
ContMeas ID: 7EA9-04-00
Microsoft Windows 10 x64 Build 14393
Thanks in Advance! I also tried your tutorial on how to recover a usb drive but it didnt work either.
i’m sorry but in your usb info is see u are using the wrong type off usb stick 2251-61 it can not work with that nand chipset
what software do i use to detect and verify the usb chipset it uses ?
getflashinfo u can get it here link
I Need help i have this USB Stick Corsair Memory CMFLS3-32GB Voyager LS memory stick 32GB black/silver. I have create the Rubberducky USB with your Introduction and when i pluged the USB in my PC (Windows 10 Pro Version: 1703) it comes an error code (Code 10) in the device Manager and the Payload doesn’t works and the USB Stick is not recognized. When i will restore the USB Stick i can’t set it manually in boot mode. Here a Picture from the USB Stick: [URL=http://www.directupload.net/file/d/4714/p7ik2tlu_jpg.htm][IMG]http://fs5.directupload.net/images/170507/temp/p7ik2tlu.jpg[/IMG][/URL]
Wow Great! U managed to find a USB Stick that still has a Phison 2251-03 nand chipset.
And when u where creating the USB Rubber Ducky using my guide, did u get error’s when making it ?
But you say u can’t set it to boot mode manually, but did you try it with shorting the pins on the nand chipset?
Hi
If i do this toturial on my flash usb and os detect flash as keyboard can i use flash for reading and writing data too
No you can’t u convert the USB Stick to a HID device, so it can not work anymore as normal USB Stick untill u flash it back to original!
The real USB Rubber Ducky in fact can do this with the Twin Duck Firmware, but i did not tried this on a normal USB Stick
Thanks for the detailed Roadmap here 😛
On new Sandisk Ultra Dual Drive M3.0
I used the GetFlashInfo before getting into the whole shebang…which produced the following result->
Volume: G:
Controller: SanDisk
Possible Memory Chip(s): Not available
VID: 0781
PID: 558A
Manufacturer: SanDisk
Product: Ultra
Query Vendor ID: SanDisk
Query Product ID: Ultra
Query Product Revision: 1.00
Physical Disk Capacity: 30752000000 Bytes
Windows Disk Capacity: 30743396352 Bytes
Internal Tags: 3W4F-8CF8
File System: FAT32
Relative Offset: 1024 KB
USB Version: 3.00 in 2.00 port
Declared Power: 224 mA
ContMeas ID: A3EA-02-00
Microsoft Windows 7 Build 7600
————————————
http://www.antspec.com/usbflashinfo/
Program Version: 8.8.0.601
=====================
Should i even bother to contiue without the mentioned Phison chip ? :'( or is it there but the GetFlashInfo is not showing ?
Yeah, don’t try it with that USB Stick! From my experience i know that SANDISK mostly don’t use Phison nand chips
Hello sir i nees help.i have a toshiba flash drive. Here
Is mine will work?
Volume: D:
Controller: Alcor AU6989AN-G/AU6998AN-G/SC908AN
Possible Memory Chip(s):
Toshiba TC58NVG7T2HBA4C
Toshiba TC58TVG7T2HBA4C
Memory Type: TLC
Flash ID: 98DE9892 7256
Flash CE: 1
Chip Code: 0xE603
Chip F/W: E70A
Group: 98
VID: 0011
PID: 7788
Manufacturer: Generic
Product: Mass Storage
Query Vendor ID: Generic
Query Product ID: Flash Disk
Query Product Revision: 8.00
Physical Disk Capacity: 16777216000 Bytes
Windows Disk Capacity: 16757686272 Bytes
Internal Tags: AYWR-SZ44
File System: FAT32
Relative Offset: 1024 KB
USB Version: 2.00
Declared Power: 100 mA
ContMeas ID: 1858-01-00
Microsoft Windows 10 Build 10240
————————————
http://www.antspec.com/usbflashinfo/
Program Version: 8.8.0.601
No, only with a Phison 2251-03
No sorry, only with a Phison 2251-03 (2303)
can i use this usb for this project???
Brand Kingston
Series Data Traveler SE9 G2
Item model number DT100G3/8GBIN
No, only with a Phison 2251-03
HI
I am trying to install virtual studio but This is 2017 Version and its completely different
can you please guide me.
Thank you
Would this still work as a USB after I do the tutorial?
Only if u reflash it back to original!
Hello, this is now the second time i’ve tried your tutorial. My GetFlash info is as follows:
Volume: G:
Controller: Phison 2303 (2251-03)
Possible Memory Chip(s):
Toshiba TH58TEG7T2JBA4C
Memory Type: TLC
Flash ID: 98DE9892 72D7
Chip F/W: 01.22.53
Firmware Date: 2014-12-02
ID_BLK Ver.: 1.2.94.0
MP Ver.: MPALL v3.82.0B
VID: 13FE
PID: 5200
Manufacturer:
Product: Patriot Memory
Query Vendor ID:
Query Product ID: Patriot Memory
Query Product Revision: PMAP
Physical Disk Capacity: 31009800192 Bytes
Windows Disk Capacity: 30988894208 Bytes
Internal Tags: 2Q2P-SX9L
File System: FAT32
Relative Offset: 4032 KB
USB Version: 3.00 in 2.00 port
Declared Power: 300 mA
ContMeas ID: 69B1-02-00
Microsoft Windows 10 x64 Build 15063
————————————
http://www.antspec.com/usbflashinfo/
Program Version: 8.8.0.601
And I am able to complete the tutorial until I need to use the second command, \fw\Psychson-master\tools\DriveCom.exe /drive=G /action=SetBootMode, at which point I get the error:
C:\Windows\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=G /action=SetBootMode
Action specified: SetBootMode
FATAL: System.InvalidOperationException: DeviceIoControl failed: 0079
at DriveCom.PhisonDevice._SendCommand(SafeFileHandle handle, Byte[] cmd, Byte[] data, Int32 bytesExpected) in C:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 365
at DriveCom.PhisonDevice.SendCommand(Byte[] cmd, Byte[] data) in C:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 314
at DriveCom.PhisonDevice.SendCommand(Byte[] cmd) in C:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 304
at DriveCom.PhisonDevice.JumpToBootMode() in C:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 233
at DriveCom.Startup.Main(String[] args) in C:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 124
Any help would be appreciated, Thank you.
Try another burner image
I’m not sure how to go about this, because this step is before the command that mentions a burner image. Since my comment i have tried reinstalling everything, so I don’t believe it to be an issue with my install or folder names.
Update: I believe DriceCom.exe is the issue. I cant get any commands to execute with it, I keep getting the error
Action specified: SendExecutable
FATAL: System.InvalidOperationException: DeviceIoControl failed: 0006
at DriveCom.PhisonDevice._SendCommand(SafeFileHandle handle, Byte[] cmd, Byte[] data, Int32 bytesExpected) in C:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 365
at DriveCom.PhisonDevice.SendCommand(Byte[] cmd, Byte[] data) in C:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 314
at DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) in C:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 246
at DriveCom.PhisonDevice.TransferFile(Byte[] data) in C:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 238
at DriveCom.Startup._ExecuteImage(String fileName) in C:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 403
at DriveCom.Startup.Main(String[] args) in C:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:line 109
I would love to make this work, Thank you in advance. Also, would you prefer to use this or for me to email you?
ERROR
C:\WINDOWS\system32>c:\fw\Psychson-master\tools\EmbedPayload.exe c:\fw\ducky\inject.bin c:\fw\Psychson-master\firmware\bin\fw.bin
FATAL: System.IO.FileNotFoundException: Could not find file ‘c:\fw\ducky\inject.bin’.
File name: ‘c:\fw\ducky\inject.bin’
at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)
at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)
at System.IO.File.InternalReadAllBytes(String path, Boolean checkHost)
at System.IO.File.ReadAllBytes(String path)
at EmbedPayload.Startup.Main(String[] args) in C:\fw\Psychson-master\EmbedPayload\EmbedPayload\Startup.cs:line 32
I see that u get this in your error
Could not find file ‘c:\fw\ducky\inject.bin’.
is the file in that location ?
Hello is possible to make a twin duck with normal usb? So i can see and upload the files to it without recoverying it everytine?
Don’t know that actually, i never tried it.
Maybe you should try it and let it know here if it worked.
Thanks
Hello,
Millions of thanks for that tutorial.
I get 1 problem at the last step. But I have to say I had to use the trick “short 2 pins of the USB” when I arrived at the step “make USB bootable”. It was the only solution working, and my USB is a Phison 2251-03 (2303).
So the problem at the last step (flashing) is:
C:\Users\Jak>c:\fw\Psychson-master\tools\DriveCom.exe /drive=E /action=SendFirmw
are /burner=c:\fw\fw_bn\BN03V104M.BIN /firmware=c:\fw\Psychson-master\firmware\b
in\fw.bin
Action specified: SendFirmware
Gathering information…
Reported chip type: 2302
Reported chip ID: 98-DE-98-92-72-50
Reported firmware version: 1.01.10
Mode: Burner
Rebooting…
Sending firmware…
FATAL: System.InvalidOperationException: Header not accepted
at DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) in
c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:line 256
at DriveCom.Startup._RunFirmware(String fileName) in c:\fw\Psychson-master\Dr
iveCom\DriveCom\Startup.cs:line 427
at DriveCom.Startup._SendFirmware() in c:\fw\Psychson-master\DriveCom\DriveCo
m\Startup.cs:line 378
at DriveCom.Startup.Main(String[] args) in c:\fw\Psychson-master\DriveCom\Dri
veCom\Startup.cs:line 114
Any idea?
(Sorry if I write in a wrong way, I’m French)
…..I see it is written Reported chip type: 2302 , but when I use usbdriveinfo it is said : Volume: F: Controller: Phison 2303 (2251-03) ….
strange, did you flash the stick already ?
keep trying is doesn’t always work from the first time.
Keep shortening the pins while plugging it in.
Thanks for your answer, I keep trying….
Hi, i went through all your above guidelines successfully with my Kingston DataTraveler G4 8GB. However, nothing happened after i plugged in. There’s no “Hello World” pops out after i insert the USB. Did i miss out something?
That’s strange,but does the usb detect as storage now or not?
If u say u successfully completed all steps,then try it again and maybe try to post some screenshots.
Hey pentesting shop,
I have (hopefully) followed all the steps correctly until i ran into a problem.
At the first part after you first open the command prompt as admin and you have to put the first code in, after I copied and pasted the code inside and pressed enter, this error popped up:
Error with input file!
Exception in thread “main” java.lang.NullPointerException
at Encoder.main(Encoder.java:125)
I have already tried reinstalling java but the error would not go. Can you help me point out where I went wrong?
Thanks in advance!
check if u installed the correct version of java.
Hi,
I got stuck in executing the first command line. I got the following error:
C:\WINDOWS\system32>java -jar c:\fw\ducky\duckencode.jar -i c:\fw\ducky\HelloWorld.txt -o c:\fw\ducky\inject.bin
Error: Unable to access jarfile c:\fw\ducky\duckencode.jar
I followed the instructions carefully. Do you know what’s wrong?
Thank you
save this as a .bat file runs all the codes whit you needing to use a cmd and copy and paste
@echo off
@echo CREATE HID PAYLOAD
pause
SET /P filename=enter name of text file:
SET /P driverletter=enter your driver letter of usb:
java -jar c:\fw\ducky\duckencoder.jar -i c:\fw\ducky\%filename%.txt -o c:\fw\ducky\inject.bin
@echo CONVERT INJECT.BIN TO FIRMWARE (Go to folder fw\Psychson-master\firmware\ and run build.bat first)
pause
cd c:\fw\Psychson-master\firmware\
start build.bat
pause
c:\fw\Psychson-master\tools\EmbedPayload.exe c:\fw\ducky\inject.bin c:\fw\Psychson-master\firmware\bin\fw.bin
@echo SET USB STICK IN BOOTMODE
pause
c:\fw\Psychson-master\tools\DriveCom.exe /drive=%driverletter% /action=SetBootMode
@echo SET ACTION TO SEND EXECUTABLE USING BURNER IMAGE
pause
c:\fw\Psychson-master\tools\DriveCom.exe /drive=%driverletter% /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN
@echo DUMP THE ORIGINAL FIRMWARE
pause
c:\fw\Psychson-master\tools\DriveCom.exe /drive=%driverletter% /action=DumpFirmware /firmware=c:\fw\currentfw.bin
@echo SEND PAYLOAD TO FIRMWARE
pause
c:\fw\Psychson-master\tools\DriveCom.exe /drive=%driverletter% /action=SendFirmware /burner=c:\fw\fw_bn\BN03V104M.BIN /firmware=c:\fw\Psychson-master\firmware\bin\fw.bin
pause
Hi,
Thanks for your super detailed tutorial.
I tried it with the following Chip:
Volume: F:
Controller: Phison 2251-50/30 (2250)
Possible Memory Chip(s):
Toshiba TC58NVG5D2FTAI0-D5
Toshiba TC58NVG5D2FX
Memory Type: MLC
Flash ID: 98D79432 76D5
Chip F/W: 03.06.10
Firmware Date: 2010-10-12
MP Ver.: MPALL vFF.FF.FF
VID: 13FE
PID: 3100
Manufacturer:
Product: 2250 PRAM
Query Vendor ID:
Query Product ID: 2250 PRAM
Query Product Revision: 1.00
Physical Disk Capacity: 0 Bytes
Windows Disk Capacity: 0 Bytes
Internal Tags: 2QAF-AV3L
USB Version: 2.00
Declared Power: 50 mA
ContMeas ID: 59B1-06-00
Microsoft Windows 10 x64 Build 17134
————————————
http://www.antspec.com/usbflashinfo/
Program Version: 9.1.0.625
And during the Step “Set Action to send executable” I get the following message:
Action specified: SendExecutable
FATAL: System.InvalidOperationException: Header not accepted
bei DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) in G:\Git\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:Zeile 256.
bei DriveCom.PhisonDevice.TransferFile(Byte[] data) in G:\Git\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:Zeile 238.
bei DriveCom.Startup._ExecuteImage(String fileName) in G:\Git\Psychson-master\DriveCom\DriveCom\Startup.cs:Zeile 403.
bei DriveCom.Startup.Main(String[] args) in G:\Git\Psychson-master\DriveCom\DriveCom\Startup.cs:Zeile 109.
I guess it is the wrong chip isn`t it?
Thanks for your help,
erldoc
indeed it’s the wrong chip.
you will need a Phison 2251-03 (2303) only that nand chipset works.
Hello, I have a problem when I execute the “C:\WINDOWS\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=E /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN” command, here’s the report I have :
C:\WINDOWS\system32>c:\fw\Psychson-master\tools\DriveCom.exe /drive=E /action=SendExecutable /burner=c:\fw\fw_bn\BN03V104M.BIN
Action specified: SendExecutable
FATAL: System.InvalidOperationException: Header not accepted
à DriveCom.PhisonDevice.TransferFile(Byte[] data, Byte header, Byte body) dans c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:ligne 256
à DriveCom.PhisonDevice.TransferFile(Byte[] data) dans c:\fw\Psychson-master\DriveCom\DriveCom\PhisonDevice.cs:ligne 238
à DriveCom.Startup._ExecuteImage(String fileName) dans c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:ligne 403
à DriveCom.Startup.Main(String[] args) dans c:\fw\Psychson-master\DriveCom\DriveCom\Startup.cs:ligne 109
Please, help me !!