RubberDucky Payloads is a web catalogue of DuckyScript payloads for the Flipper Zero, which in BadUSB mode emulates a keyboard to inject keystrokes: backdoors, credential and data exfiltration, reconnaissance and the odd prank, sorted by category and platform, each with its own README covering the technique, how to run it, and how to defend against it.

I built and run it: a Next.js catalogue with search, filters and per-payload download counts on Upstash Redis. I wrote each payload and its README, from the WinRM backdoor to the Telegram-data stealers, every one now paired with a defense section covering detection and mitigation. It's a public reference for learning and authorized testing only, live at payloads.lukres.dev since 2024.