Leaking Network Devices with Rubber Ducky Attack

Social engineering is a psychological attack targeting individuals' vulnerabilities, often aimed at employees of targeted organizations. Unlike traditional electronic attacks, it relies on manipulating individuals to run malware-infected devices or share sensitive information willingly. This st...

Full description

Saved in:
Bibliographic Details
Main Authors: Zeynep Rana Donmez, Şeyma Atmaca, Yıldıray YALMAN
Format: Article
Language:English
Published: Bursa Technical University 2024-12-01
Series:Journal of Innovative Science and Engineering
Subjects:
Online Access:http://jise.btu.edu.tr/en/download/article-file/3956957
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1832586932596506624
author Zeynep Rana Donmez
Şeyma Atmaca
Yıldıray YALMAN
author_facet Zeynep Rana Donmez
Şeyma Atmaca
Yıldıray YALMAN
author_sort Zeynep Rana Donmez
collection DOAJ
description Social engineering is a psychological attack targeting individuals' vulnerabilities, often aimed at employees of targeted organizations. Unlike traditional electronic attacks, it relies on manipulating individuals to run malware-infected devices or share sensitive information willingly. This study uses the Arduino Digispark Attiny85 module to demonstrate the potential consequences of social engineering attacks on network devices. By placing the module in a device connected to the target network, a network scan was performed to determine the security status, IP addresses, port information, and version information of all devices. During the experimental studies, it was observed that the most suitable port was the FTP port, and the attack was carried out via msfconsole on the FTP port. Unlike similar studies that focus on a single device, our approach allows simultaneous infiltration of multiple devices within the network, obtaining control over multiple authorized devices, highlighting the significant advantage of our method.
format Article
id doaj-art-6620b2382a8340d785a1a7451de5cbdb
institution Kabale University
issn 2602-4217
language English
publishDate 2024-12-01
publisher Bursa Technical University
record_format Article
series Journal of Innovative Science and Engineering
spelling doaj-art-6620b2382a8340d785a1a7451de5cbdb2025-01-24T19:04:30ZengBursa Technical UniversityJournal of Innovative Science and Engineering2602-42172024-12-018219921210.38088/jise.1490148Leaking Network Devices with Rubber Ducky AttackZeynep Rana Donmez0https://orcid.org/0009-0009-5232-2136Şeyma Atmaca1https://orcid.org/0009-0007-0072-5019Yıldıray YALMAN2https://orcid.org/0000-0002-2313-4525Bursa Technical UniversityBursa Technical UniversityPIRI REIS UNIVERSITYSocial engineering is a psychological attack targeting individuals' vulnerabilities, often aimed at employees of targeted organizations. Unlike traditional electronic attacks, it relies on manipulating individuals to run malware-infected devices or share sensitive information willingly. This study uses the Arduino Digispark Attiny85 module to demonstrate the potential consequences of social engineering attacks on network devices. By placing the module in a device connected to the target network, a network scan was performed to determine the security status, IP addresses, port information, and version information of all devices. During the experimental studies, it was observed that the most suitable port was the FTP port, and the attack was carried out via msfconsole on the FTP port. Unlike similar studies that focus on a single device, our approach allows simultaneous infiltration of multiple devices within the network, obtaining control over multiple authorized devices, highlighting the significant advantage of our method.http://jise.btu.edu.tr/en/download/article-file/3956957usb rubber duckyhackinglinuxarduinobash script
spellingShingle Zeynep Rana Donmez
Şeyma Atmaca
Yıldıray YALMAN
Leaking Network Devices with Rubber Ducky Attack
Journal of Innovative Science and Engineering
usb rubber ducky
hacking
linux
arduino
bash script
title Leaking Network Devices with Rubber Ducky Attack
title_full Leaking Network Devices with Rubber Ducky Attack
title_fullStr Leaking Network Devices with Rubber Ducky Attack
title_full_unstemmed Leaking Network Devices with Rubber Ducky Attack
title_short Leaking Network Devices with Rubber Ducky Attack
title_sort leaking network devices with rubber ducky attack
topic usb rubber ducky
hacking
linux
arduino
bash script
url http://jise.btu.edu.tr/en/download/article-file/3956957
work_keys_str_mv AT zeynepranadonmez leakingnetworkdeviceswithrubberduckyattack
AT seymaatmaca leakingnetworkdeviceswithrubberduckyattack
AT yıldırayyalman leakingnetworkdeviceswithrubberduckyattack