MalDuino in a nutshell.

MalDuino is the Arduino based BadUSB. Simply load your plaintext BadUSB scripts onto your MalDuino, and you're good to go!

Use MalDuino's 3 position switch to select between running script 1 and 2, and setup mode (3) which exposes the flash storage to your computer so you can edit your scripts and configure attacks.

We put MalDuino in the most basic USB enclosure we could find, the unbranded case is perfect for pentests; it doesn't draw attention, whilst being functional and encompassing dual USB A and C.

Housed in an incognito USB case

Exfiltrate files to 128MB internal storage. File transfer speed ≈ 200KBps

34 Keyboard languages supported! (see below for list)

Select between 2 saved scripts using the switches

Easily change the device's PID/VID

Dual USB A + C, so it'll fit in any PC

We made a (1 minute) video about MalDuino:

Scripting

LOCALE US

Set the desired keyboard language with the 'LOCALE' command. Supported Languages include: BE, BG, CA-CM, CA-FR, CH-DE, CH,FR, CZ, DE, DK, EE, ES, ES-LA, FI, FR, GB, GR, HU, IE, IN, IS, IT, LT, LV, NL, PT-BR, PT, RO, RU, SE, SI, SK, TR, UA, US

Same old scripting language

MalDuino uses the same BadUSB scripting language you've been using for years, so all your old scripts will work just fine, as well as the thousands freely available online.

Common Questions

Does it come with instructions?

Yes! See the documentation site here: https://docs.maltronics.com/devices/malduino-3

How many scripts can it store?

You can store as many scripts as you want within the 128MB onboard flash storage. Though you can select between 2 scipts using the onboard set of switches. Switch position 3 is reserved for setup mode

What keyboard languages are supported

Currently the supported country codes are: BE, BG, CA-CM, CA-FR, CH-DE, CH,FR, CZ, DE, DK, EE, ES, ES-LA, FI, FR, GB, GR, HU, IE, IN, IS, IT, LT, LV, NL, PT-BR, PT, RO, RU, SE, SI, SK, TR, UA, US

What kind of files can be exfiltrated to MalDuino?

Theoretically any file, however keep in mind transfer speeds are 200KBps. It's recommended to limit exfiltration to small text files.

What operating systems does MalDuino work on?

Theoretically all of them! However some features may not work on MacOS or Linux. In our testing this includes: 'run on indicator' and 'disable capslock'. Additionally MacOS now prompts the user to verify USB devices before it'll allow them to work, making running BadUSB scripts on them tricky.

Shipping Questions

Where do you ship from?

We ship everything via our fulfilment partner in Northampton, England.

Which courier will deliver my order?

This depends on where you are located and which shipping option you chose:

  • International Tracked / Signed
    • Your order will initially ship via either Norsk, Royal Mail or DHL economy, once your order reaches your country it'll be passed to your national postal service. For example in the US this will be USPS.
  • International Priority
    • Your order will ship with either DHL Express or Fedex
  • Within the UK
    • Royal mail

How long does shipping take?

This depends on where you are located and which shipping option you chose.

  • International Tracked / Signed
    • The average is 7 working days. Please note this is an average, if you order during peak periods (Christmas/Black Friday) it will take longer. If you need your order by a deadline please choose international priority.
  • International Priority
    • Usually within 1 - 3 days.
  • Within the UK
    • 1-2 days

Please note there are currently heavy shipping delays with our international tracked / signed service due to seasonal delays.