Build a $10 DIY Wi-Fi USB Keylogger with ESP32-S3 and MicroPython (DuckLogger)

In this guide, we'll cover what DuckLogger is, the hardware you need, and how you can assemble and program it yourself in a few simple steps.

What is DuckLogger?

DuckLogger is a MicroPython-powered DIY hardware hacking project. It silently intercepts and logs USB keystrokes into a text file and hosts a built-in Wi-Fi access point, allowing you to easily and wirelessly download your logs through a sleek web UI.

Step 2: Configure the CH9350 Module

The CH9350 supports multiple operating modes. For our keylogger to intercept USB keystrokes, we need to set it to USB Host Mode.

.

Once flashed, disconnect and reconnect the board via USB.

Step 4: Install Dependencies

On your computer, install mpremote, a handy CLI tool for interacting with MicroPython devices:

pip install mpremote

Verify your board is detected:

mpremote connect list

Next, install the required USB packages directly onto the ESP32-S3:

mpremote mip install usb-device

mpremote mip install usb-device-keyboard

Step 5: Upload the DuckLogger Code

Clone the official DuckLogger repository to your computer:

git clone https://github.com/Itsmmdoha/duckLogger.git

cd duckLogger

With your board connected via USB, copy the project files over to the microcontroller:

1. Copy all library files to the /lib directory on the device:

mpremote cp lib/*.py :/lib/

2. Copy the main execution file to the root of the device:

mpremote cp main.py :

3. Reboot the board to start DuckLogger:

mpremote reset

How to Use Your New Keylogger

1. 
   Plug the target USB keyboard directly into the CH9350 HID module.


2. 
   Connect the ESP32-S3 SuperMini to the target computer using a USB-C to USB-A cable.

The device will automatically power on, pass through the keystrokes to the computer (so the computer behaves normally), and simultaneously save those keystrokes to its internal flash memory.

To retrieve your logs:

From your smartphone or laptop, look for the newly created Wi-Fi Access Point.

• 
  Connect to the Wi-Fi Network (Default Password: duckPass1234)


• 
  Open your browser and navigate to: http://192.168.4.1/
  

Boom! You now have a low-cost, stealthy, Wi-Fi enabled hardware keylogger.

Final Thoughts

DuckLogger is an awesome example of how accessible hardware hacking and cybersecurity projects have become. Using MicroPython and cheap microcontrollers, you can build testing tools that previously cost hundreds of dollars.

Check out the full source code, contribute, or drop a star on the DuckLogger GitHub Repository!

Disclaimer: This project is strictly for educational purposes, security research, and personal use on your own devices. Always ensure you have explicit, documented permission before using keystroke logging tools.