This repository is a community-driven collection of DuckyScript payloads designed for USB Rubber Ducky, Flipper Zero, and other HID attack devices. It primarily functions as a playbook for penetration testers and red teamers, offering ready-to-inject scripts that automate keystroke injection attacks. The codebase is organized into a flat file tree by platform (Windows, Linux, macOS, mobile) and category (credentials, remote_access, destructive, prank, exfiltration, recon, execution, etc.). Each payload is a self-contained DuckyScript file, often embedding PowerShell, Bash, or Python one-liners that are typed and executed on the target machine. The repository includes hundreds of payloads covering credential theft (e.g., browser password dumping, WiFi key extraction), remote access (reverse shells, persistence via systemd, scheduled tasks), destructive actions (fork bombs, zip bombs, file corruption), exfiltration (webhook, Dropbox, email), and pranks (RickRolls, fake updates, desktop trolling). The architecture is not a traditional application but a script library; the 'code' is primarily configuration/scripting rather than compiled software. Maintenance is active, with monthly snapshot tags and contributions, though many payloads suffer from hardcoded URLs and dependencies on specific OS versions, leading to moderate technical drift. The repository does not contain data pipelines, notebooks, or ML models.