OMG Cable or Rubber Ducky Payload Delivery Page

Darshan Thummar@Mighty

•updated Jun 11, 2026•0•0•1

This rule detects HTTP traffic containing the string "duckyScript" in the file data, indicating a potential payload delivery page associated with OMG Cables or Rubber Ducky devices. These devices are often used for injecting malicious keystrokes or other payloads.