Bypassing Windows Security Using a Raspberry Pi Pico as a Rubber Ducky for Remote Access

This chapter describes how the Raspberry Pi Pico, a low-cost and widely available microcontroller, can be used to carry out a security attack on Windows systems. By programming the Pico to behave like a keyboard, it can automatically type and run commands once plugged into a computer. These commands are designed to turn off important Windows security features like User Account Control (UAC), Firewall, and Windows Defender. Once the defenses are disabled, a tool called Venom RAT is downloaded and installed. This tool allows the attacker to take full control of the computer remotely and even capture what the user types. The chapter provides a step-by-step guide on how the device is prepared, how the attack is carried out, and what happens after the attack. It also includes the results of testing this method in a controlled environment. The findings show that this type of attack is not only possible but also very effective. Because the Pico looks like a normal USB device, the attack often goes unnoticed. This research highlights the need for stronger protection against unknown USB devices and raises awareness about this growing cyber threat.