#Persistence

It Types Faster Than You Do: USB HID Attacks with a Rubber Ducky

A stick that looks like a thumb drive enumerates as a keyboard — no driver, no prompt, no consent. In a lab: Defender switched off, a logon-triggered PowerShell reverse shell on Windows, and root persistence with the logs wiped on Linux.