DuckyScript
Cyber Recon Suite
2.4GHz WiFi • BLE 5.0 • Passive Deauth
AI Payload Architect
Groq Engine • Qwen 3.8 27B
Tools
Script Builder
DELAY nWait n milliseconds before next commandSTRING textType the given text as keystrokesENTERPress Enter / Return keyGUI rWin+R opens Run dialog (Windows)GUI SPACECmd+Space opens Spotlight (macOS)CTRL ALT tOpens terminal on most Linux distrosALT F4Close the active windowCTRL SHIFT ESCOpens Task Manager (Windows)TABTab key - cycle between fieldsESCAPE / ESCCancel current dialogREM commentScript comment, not executedREPEAT nRepeat previous command n timesDEFAULTDELAY nDefault delay between all commandsF1 - F12Function keysNeoPixel
Firmware
Device Info & Diagnostics
GhostChip Hardware Diagnostics
ESP32-S3 Dual-Core Xtensa LX7 • Realtime Telemetry
- Thermal Management: Continuous high-power operations (BLE Deauth loops / Radio TX bursts) can cause board temperatures to reach 45°C–50°C. Ensure sufficient airflow.
- Electrostatic (ESD) Safety: Avoid touching exposed GPIO header pins while connected to host USB power to prevent static discharge damage.
- Operational Scope: BadUSB HID payloads must only be executed on target hosts you legally own or have explicit written penetration testing authorization to evaluate.
User Guide
DuckyScript is the industry standard for BadUSB payloads. It consists of simple commands that represent keystrokes.
DELAY [ms]Pauses the script for the specified milliseconds. Essential for timing.STRING [text]Types the specified text exactly as provided.ENTERPresses the Enter/Return key.GUI [key]Presses the System/Windows/Command key + another key.REM [text]Comment line. Ignored during execution.DEFAULTDELAY [ms]Sets a delay between every single command.CTRL / CONTROLThe Control key.ALTThe Alt / Option key.SHIFTThe Shift key.CAPSLOCKToggles Caps Lock.TABThe Tab key.ESCAPE / ESCThe Escape key.SPACEThe Space bar.UP / DOWN / LEFT / RIGHTArrow keys.PAGEUP / PAGEDOWNPage navigation keys.HOME / ENDCursor navigation keys.F1 - F12Function keys.A visual interface to create scripts. Select a command block, fill in the details, and add it to your script buffer.
Allows you to chain multiple scripts together with custom delays. Great for complex multi-stage attacks.
A real-time preview of what your script will do. It shows the keystrokes and timing without actually executing on the host.
Change the color and brightness of the onboard LED to indicate status or for stealth mode.
DEFAULTDELAY 0 and manual DELAY commands for the fastest possible execution while maintaining reliability.
- Use
REMliberally to explain what your script does. - Always test new scripts in the Simulator before deployment.
- For Windows, use PowerShell for exfiltration. For Mac, use Curl or Terminal.
Live Keyboard
File Manager
Payload Templates Studio
Exfiltration & Payload Builder
Generate Production DuckyScript Templates with Webhook Endpoints
Educational & Authorized Testing Only. Unauthorized execution on computer systems is strictly prohibited. Use only on target machines you own or have explicit written authorization to pentest.
Collects hardware, OS, and user information and sends it to a webhook.
Generate free receiver URL at Webhook.site or ntfy.sh
AI Voice Assistant
Starred Payload Library
Favourite Payload Repository
Quick Access DuckyScript Payloads saved on SD Card
Encrypted Password Vault
Secure Credential Enclave
Stores DuckyScript Auto-Typers directly on SD Card (/Vault)
Shortcut Launcher
One-Touch Rapid Deployment
Executes DuckyScript Macros stored on SD Card (/Shortcuts)
Action Recorder
Record keyboard actions & timing (via physical keyboard or on-screen keys) and export as DuckyScript.
Prompt Enhancer
Master System Prompt Engine
Synthesizes Core Instructions into HID Payloads
GhostChip AI Agent
Try: "Open Spotlight on Mac and type Notes then press Enter"
Settings
Key is stored on device. Never leaves the chip.
Used for GhostChip AI Agent & Script Generation with poolside/laguna-xs-2.1