Recover a USB Stick

On this page i am going to explain how to recover your self made USB Rubber Ducky to a regular USB Stick

So now that u made your own USB Rubber Ducky using my guide HERE

you may come to a point where u want to recover the converted stick back to a normal Flash drive

you also need to recover it to a normal flash drive every time you want to flash a new payload on the USB Stick

so now i am going to explain you how to do this

Step One:

Download this file: HERE

For convenience save this file to c:\fw\fw_bn

This will give u this file as a result at that location

iconbadusb

MPALL_v3.71.0A_03_MLC(UP03_64pin).rar

Now right click on the file and select Extract Here

badrec0this will give u this folder

badrec1Open the folder MPALLv3.710A_03MLC(UP03 64pin)

u should then see this

badrec2

Now double click on MPALL_F1_9000_v371_0A.exe

u should then be in the software tool to recover the USB Stick

like seen below

badrec3

badrec333

 

PinsToShortUponPlugInForBootMode

Keep shorting this pins while plugging in the USB Stick

badrec33

badrec44

badrec55

badrec66

 

u should then come to this window

badrec7

badrec8

badrec9

badrec10

badrec11

badrec12

badrec13

badrec14

badrec15

badrec16

badrec17

 

badrec18

badrec19

badrec20

 

badrec21

 

badrec33

badrec22

badrec23

badrec24

badrec25

badrec26

badrec27

badrec28

badrec29

 

U now successfully flashed the USB Stick back to stock!

24 Responses to “Recover a USB Stick”

  1. Arnoldo Machado March 21, 2016 at 5:50 pm Permalink

    I have got the MPALL program but when I plug the USB into the computer I got the following message F: Mode 255 ID Error 000

    • pentestshop March 27, 2016 at 7:26 pm Permalink

      Did u short the pins while plugging it in? And are you sure u have a Phison 2251-03 ?

  2. Carlo April 3, 2016 at 6:12 pm Permalink

    Hi pentestshop,
    the progress bar hang at “ISP – Firmware” and, after a while, show the error message “CT – Read OnlyPage” with red background.
    What can I do to solve this problem?

    Thank you in advance,
    Carlo

    P.S.: I transformed Kingston DT R3.0 into Duck after the S.O. doesn’t mount and show the drive…

    • pentestshop April 3, 2016 at 9:49 pm Permalink

      Hi Carlo,
      Make sure u have selected the right Burner Image
      and the correct firmware file
      and that all the other settings are correct.
      If you still have problems i would love to take a look at it using Teamviewer
      Then contact me at pentestingshop@gmail.com

  3. Datife April 21, 2016 at 11:16 pm Permalink

    Hi guys , how do to short the two pins ????? It’very very very difficult for me , you know tell me how to do easy tips??

    • pentestshop April 22, 2016 at 5:28 am Permalink

      It’s indeed difficult to keep shortening the pins while plugging it in,but i’m afraid there is no other option..You could try to solder 2 wires on the pins..But i dont know how good your solder skills are.

      • Datalife April 22, 2016 at 7:33 am Permalink

        the origianl usb duky is not in stock ?

      • Datalife April 22, 2016 at 7:42 am Permalink

        the solder on two pins can always be welded or it must be whenever detached ??

        • pentestshop April 22, 2016 at 7:47 am Permalink

          Just solder the wires on the 2 pins and strip the other end and shorten them only when u need to reflash the stick back to normal.

          • Datalife April 22, 2016 at 7:59 am Permalink

            thanks a lot 😉 but i have the last question … you assure me that the pins to solder are the second and third ?? beacause in another tutorial i have read that are the 1&2 … i have usb stick DataTravel DT111 with Phison 2251-03

          • pentestshop April 23, 2016 at 2:28 pm Permalink

            Yes its pin 1 and 2

  4. Datalife April 23, 2016 at 2:24 pm Permalink

    hi guys , i have a Datatraveler 111 8gb with Phison 2251-03 :

    Device Vendor: Phison
    Device Name: 2303 Boot ROM
    Device Revision: 0110
    Product Model: 2303 PRAM
    Product Revision: 1.00
    Chip Vendor: Phison
    Chip Part-Number: PS2251-03(PS2303) – F/W 01.01.10 [2012-04-09]

    I follow the tutorial for recover a usb-stick but when Start the recover , show this error : CT 0x1049 ( look the image ) http://i64.tinypic.com/25u6sdt.jpg

    Can you help me please 🙁 ??????

  5. Dj October 13, 2016 at 1:46 am Permalink

    Did I miss it somewhere it says that be sure to have EVERY payload you want when you create the Rubber Ducky because reverting it to add more payloads is a nightmare?!

  6. iven December 16, 2016 at 12:30 pm Permalink

    please can help to get Burner and firmware for

    Volume: H:
    Controller: Phison 2251-61 (2261)
    Possible Memory Chip(s):
    Toshiba TH58NVG7T2HTA20
    Toshiba TC58NVG6T2HTA00
    Memory Type: TLC
    Flash ID: 98DE9892 7256
    Chip F/W: 01.01.10
    Firmware Date: 2011-01-26
    MP Ver.: MPALL vFF.FF.FF
    VID: 13FE
    PID: 3E00
    Manufacturer:
    Product: 2261 PRAM
    Query Vendor ID:
    Query Product ID: 2261 PRAM
    Query Product Revision: 1.00
    Physical Disk Capacity: 0 Bytes
    Windows Disk Capacity: 0 Bytes
    Internal Tags: 2QAF-AV3L
    USB Version: 2.00
    Declared Power: 50 mA
    ContMeas ID: C201-07-00
    Microsoft Windows 10 x64 Build 10586
    ————————————
    http://www.antspec.com/usbflashinfo/
    Program Version: 8.7.0.597

    • pentestshop December 17, 2016 at 3:01 am Permalink

      You are trying to do it with a wrong nand chipset, sadly it only works with the Phison 2251-03 nand

  7. Macke January 3, 2017 at 4:10 pm Permalink

    I really need some help with the recovery of my usb stick. When i plug it in and shorted the pins it will just shows this.
    https://gyazo.com/6a912a47c368aef05721037a95b14f82

    • pentestshop January 4, 2017 at 12:19 pm Permalink

      i would love to help you,but first tell me what USB Stick you have!..Cause if you have another brand of USB Stick then the one i recommended that u should maybe use another version of MPAll

      • Macke January 6, 2017 at 3:25 pm Permalink

        Yea i have the Patriot Supersonic Xpress 16gb and checked it with GetFlashInfo and it has Phison 2251-03

        • pentestshop January 7, 2017 at 3:12 pm Permalink

          add pentestingshop on facebook and pm me, maybe i can help using teamwiever

  8. piterson January 5, 2017 at 9:54 pm Permalink

    I did everything as told, but when it detects my pendrive (which is recommended Patriot Supersonic Xpress btw) it returns: Mode 255 ID Error 0001.
    Thank you for your help!

    • pentestshop January 5, 2017 at 10:29 pm Permalink

      yeah you may have a Patriot Supersonic Xpress that is indeed in the list on github, but did you check it first with GetFlash info that is has the Phison 2251-03 chipset?
      Cause now these day they deliver them with a Phison 2207 nand chip

Leave a Reply

ENTER CAPTCHA * Time limit is exhausted. Please reload CAPTCHA.