# hak5/usbrubberducky-payloads

The Official USB Rubber Ducky Payload Repository

Repository: https://github.com/hak5/usbrubberducky-payloads
Canonical: https://ross.abutalabs.com/products/usbrubberducky-payloads
Homepage: https://usbrubberducky.com
Language: PowerShell
License Family: other
Topics: badusb, ducky-payloads, duckyscript, hak5, hak5-rubber-ducky, hid, keystroke-injection, security-tools, usb-rubber-ducky, usbrubberducky, hacking-tools, hotplug, payloads, pentesting
Last push: 2026-06-13T21:54:13+00:00

## Health v2 (maintenance only)
Score: 71/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 87, release rhythm 35, longevity 100
- inputs: {"age_days": 1877, "days_push": 81, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 5953, forks 1669 (observed 2026-08-28T04:09:32.727772+00:00)

## What it is
The official community payload repository for the Hak5 USB Rubber Ducky, containing DuckyScript payloads, extensions, and language files for HID keystroke-injection attacks. Payloads must be compiled with Hak5 PayloadStudio and run on the USB Rubber Ducky hardware.

## Use cases
- find badusb payloads for the usb rubber ducky
- learn duckyscript examples for hid attacks
- contribute a keystroke injection payload
- get payloads for physical penetration testing engagements
- browse community ducky payload library
- test security awareness against usb drop attacks

## When to choose
- you own a Hak5 USB Rubber Ducky and need ready-made DuckyScript payloads
- you want to contribute or study community HID attack scripts
- you are doing authorized physical penetration testing with hotplug attack tools

## When to avoid
- you need a software-only badusb emulator or defense tool
- you want payloads for other Hak5 devices like Bash Bunny or Key Croc
- you lack the USB Rubber Ducky hardware, since payloads cannot run elsewhere

## Facets
- artifact type: dataset
- maturity: active
- function: security, penetration-testing, developer-tools
- domain: security, penetration-testing, hardware
- platform: cross-platform, embedded
- tags: badusb, duckyscript, hid-keystroke-injection, usb-rubber-ducky, payloads, hak5, pentesting

## Member repositories
- hak5/usbrubberducky-payloads (main) score 71

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:09:32.727772+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T17:50:43.049534+00:00, confidence not recorded.
  - readme: https://github.com/hak5/usbrubberducky-payloads (fetched 2026-08-28T04:09:32.727772+00:00, sha 44ea0b377067)
  - homepage: https://usbrubberducky.com (fetched 2026-08-29T08:46:17.793663+00:00, sha 52b65239a1e5)
  - site_page: https://docs.hak5.org (fetched 2026-08-29T08:46:17.796516+00:00, sha b379fd8404ba)
  - site_page: https://hak5.org/pages/about (fetched 2026-08-29T08:46:17.798215+00:00, sha 6b241270409d)
- Data as of 2026-08-30T08:39:29.467469+00:00.