Recover a USB Stick

On this page i am going to explain how to recover your self made USB Rubber Ducky to a regular USB Stick

So now that u made your own USB Rubber Ducky using my guide HERE

you may come to a point where u want to recover the converted stick back to a normal Flash drive

you also need to recover it to a normal flash drive every time you want to flash a new payload on the USB Stick

so now i am going to explain you how to do this

Step One:

Download this file: HERE

For convenience save this file to c:\fw\fw_bn

This will give u this file as a result at that location



Now right click on the file and select Extract Here

badrec0this will give u this folder

badrec1Open the folder MPALLv3.710A_03MLC(UP03 64pin)

u should then see this


Now double click on MPALL_F1_9000_v371_0A.exe

u should then be in the software tool to recover the USB Stick

like seen below





Keep shorting this pins while plugging in the USB Stick






u should then come to this window





























U now successfully flashed the USB Stick back to stock!

33 Responses to “Recover a USB Stick”

  1. Arnoldo Machado March 21, 2016 at 5:50 pm Permalink

    I have got the MPALL program but when I plug the USB into the computer I got the following message F: Mode 255 ID Error 000

    • pentestshop March 27, 2016 at 7:26 pm Permalink

      Did u short the pins while plugging it in? And are you sure u have a Phison 2251-03 ?

  2. Carlo April 3, 2016 at 6:12 pm Permalink

    Hi pentestshop,
    the progress bar hang at “ISP – Firmware” and, after a while, show the error message “CT – Read OnlyPage” with red background.
    What can I do to solve this problem?

    Thank you in advance,

    P.S.: I transformed Kingston DT R3.0 into Duck after the S.O. doesn’t mount and show the drive…

    • pentestshop April 3, 2016 at 9:49 pm Permalink

      Hi Carlo,
      Make sure u have selected the right Burner Image
      and the correct firmware file
      and that all the other settings are correct.
      If you still have problems i would love to take a look at it using Teamviewer
      Then contact me at

  3. Datife April 21, 2016 at 11:16 pm Permalink

    Hi guys , how do to short the two pins ????? It’very very very difficult for me , you know tell me how to do easy tips??

    • pentestshop April 22, 2016 at 5:28 am Permalink

      It’s indeed difficult to keep shortening the pins while plugging it in,but i’m afraid there is no other option..You could try to solder 2 wires on the pins..But i dont know how good your solder skills are.

      • Datalife April 22, 2016 at 7:33 am Permalink

        the origianl usb duky is not in stock ?

      • Datalife April 22, 2016 at 7:42 am Permalink

        the solder on two pins can always be welded or it must be whenever detached ??

        • pentestshop April 22, 2016 at 7:47 am Permalink

          Just solder the wires on the 2 pins and strip the other end and shorten them only when u need to reflash the stick back to normal.

          • Datalife April 22, 2016 at 7:59 am Permalink

            thanks a lot 😉 but i have the last question … you assure me that the pins to solder are the second and third ?? beacause in another tutorial i have read that are the 1&2 … i have usb stick DataTravel DT111 with Phison 2251-03

          • pentestshop April 23, 2016 at 2:28 pm Permalink

            Yes its pin 1 and 2

  4. Datalife April 23, 2016 at 2:24 pm Permalink

    hi guys , i have a Datatraveler 111 8gb with Phison 2251-03 :

    Device Vendor: Phison
    Device Name: 2303 Boot ROM
    Device Revision: 0110
    Product Model: 2303 PRAM
    Product Revision: 1.00
    Chip Vendor: Phison
    Chip Part-Number: PS2251-03(PS2303) – F/W 01.01.10 [2012-04-09]

    I follow the tutorial for recover a usb-stick but when Start the recover , show this error : CT 0x1049 ( look the image )

    Can you help me please 🙁 ??????

  5. Dj October 13, 2016 at 1:46 am Permalink

    Did I miss it somewhere it says that be sure to have EVERY payload you want when you create the Rubber Ducky because reverting it to add more payloads is a nightmare?!

  6. iven December 16, 2016 at 12:30 pm Permalink

    please can help to get Burner and firmware for

    Volume: H:
    Controller: Phison 2251-61 (2261)
    Possible Memory Chip(s):
    Toshiba TH58NVG7T2HTA20
    Toshiba TC58NVG6T2HTA00
    Memory Type: TLC
    Flash ID: 98DE9892 7256
    Chip F/W: 01.01.10
    Firmware Date: 2011-01-26
    MP Ver.: MPALL vFF.FF.FF
    VID: 13FE
    PID: 3E00
    Product: 2261 PRAM
    Query Vendor ID:
    Query Product ID: 2261 PRAM
    Query Product Revision: 1.00
    Physical Disk Capacity: 0 Bytes
    Windows Disk Capacity: 0 Bytes
    Internal Tags: 2QAF-AV3L
    USB Version: 2.00
    Declared Power: 50 mA
    ContMeas ID: C201-07-00
    Microsoft Windows 10 x64 Build 10586
    Program Version:

    • pentestshop December 17, 2016 at 3:01 am Permalink

      You are trying to do it with a wrong nand chipset, sadly it only works with the Phison 2251-03 nand

  7. Macke January 3, 2017 at 4:10 pm Permalink

    I really need some help with the recovery of my usb stick. When i plug it in and shorted the pins it will just shows this.

    • pentestshop January 4, 2017 at 12:19 pm Permalink

      i would love to help you,but first tell me what USB Stick you have!..Cause if you have another brand of USB Stick then the one i recommended that u should maybe use another version of MPAll

      • Macke January 6, 2017 at 3:25 pm Permalink

        Yea i have the Patriot Supersonic Xpress 16gb and checked it with GetFlashInfo and it has Phison 2251-03

        • pentestshop January 7, 2017 at 3:12 pm Permalink

          add pentestingshop on facebook and pm me, maybe i can help using teamwiever

  8. piterson January 5, 2017 at 9:54 pm Permalink

    I did everything as told, but when it detects my pendrive (which is recommended Patriot Supersonic Xpress btw) it returns: Mode 255 ID Error 0001.
    Thank you for your help!

    • pentestshop January 5, 2017 at 10:29 pm Permalink

      yeah you may have a Patriot Supersonic Xpress that is indeed in the list on github, but did you check it first with GetFlash info that is has the Phison 2251-03 chipset?
      Cause now these day they deliver them with a Phison 2207 nand chip

  9. dam February 6, 2017 at 9:12 pm Permalink

    I kinda removed the pin 1 and 2 and still it does not work :/

    • pentestshop February 9, 2017 at 3:19 pm Permalink

      U removed the pin1 and 2 ?
      I hope u didn’t break them off 🙂
      U need to short pin 2 and 3 while plugging it in
      use some wire to short pin 2-3 and just plug it in while keeping it shorted

      • Dat Boi April 8, 2017 at 11:04 pm Permalink

        I cannot get the pins to short. Nothing will work without shorting the pins, and they will not short.

  10. db4z March 26, 2017 at 5:30 am Permalink

    Hi, I’ve done all the steps to configure the Kingston DT111 (PS2251-03 (PS2303)), all the steps worked, but when removing and inserting again, the rubber ducky did not work. I thought I did something wrong, so I tried to recover, but my USB does not appear on the MPALL screen (even if I make the short circuit on pin 2 and 3), nothing opens. I connected on linux and tried the command “lsusb” but find nothing, what could have done wrong? How can I check if it does not burn(broke)? Thank you for you help.

    • pentestshop March 26, 2017 at 11:41 am Permalink

      That’s weird, did you try other USB Ports as well?
      And did u short the pins correctly?
      Also if the Kingston DT111 is a USB 3.0 stick (Blue USB Plug) u need to use a USB 3 port to connect to MPALL
      And did u checked the chipset using the Getflash info tool, or did u assume it has the PS2251-03 chipset?

      • db4z March 27, 2017 at 6:28 am Permalink

        Yes I tried all ports, try with a normal pen drive and they are all working, when I insert the normal pen drive in linux and give the command “lsusb” the new device appears but with the USB that I modified nothing happens.
        About the short circuit I was trying with other pins, I was making the wrong short circuit and after I tried on pins 2 and 3, so I think I should have burned the chip when I made the short circuit on the wrong pins . I did setup on MPALL USB 3 and USB 2 as well.
        Before starting the all procedure, I checked the chipset and it`s PS2251-03 (PS2303) with firmware of the year 2012.
        I have a rubber ducky deluxe from hak5, but for a long time I’ve been looking for a pen drive to make my own rubber ducky. Unfortunately I’m having a hard time finding a pen drive with this chipset, it was more than 1 month searching on ebay for a used pen drive with this chipset. Do you know of any site where I can find a pen drive with this chipset?
        Thank very much for your attention.

  11. HS March 26, 2017 at 1:46 pm Permalink

    My memory is 2303 and short pin 2 and 3 while plugging
    But when push start button, CT. 0x0040 was showed in the box not CT. Test finished ~~
    I’m finding some document on google but not easy to find something can help.
    Do you know what’s wrong??

    and during working(actually i just try to input other bin file), my memory was not recognized. But short pin 2 and 3, sometimes it was recognized.
    Can I back to work??

    • pentestshop April 9, 2017 at 7:08 pm Permalink

      Sorry but do not try to do it with that stick..I can not help with that kind

Leave a Reply

ENTER CAPTCHA * Time limit is exhausted. Please reload CAPTCHA.