polyshell

PolyShell: un políglota de Bash/Batch/PowerShell Qué es PolyShell es un script que es válido simultáneamente en Bash, Windows Batch y PowerShell es decir, un políglota. Esto convierte a PolyShell en una plantilla útil para pruebas de penetración, ya que se puede ejecutar en la mayoría de los...

WiFi-password-stealer

WiFi密码窃取器 你是否曾在电影中见过这样的场景：黑客将一个看似普通的U盘插入电脑，瞬间窃取数据？今天，你将亲手打造一个能够实现同样功能的设备。 ⚠️ 声明 ： 本项目中的所有内容仅供安全研究目的使用。 目录 WiFi密码窃取器 目录 引言 设置 前提条件 Rubber Ducky攻击 所需材料 - 你需要什么 击键注入工具 击键注入 延迟 数据窃取 Windows漏洞利用 通过电子邮件发送被盗数据 Linux漏洞利用 将被盗数据存储到U盘 Bash脚本 负载快速概览 窃取数据的格式化 USB大容量存储设备问题 负载编写器 Bash Bunny攻击 局限性与缺点 参考 引言...

android_hid

androidhid Use Android as Rubber Ducky against targeted Android device or PC HID attack using Android Using Android as Rubber Ducky against Android or Windows. This is not a new technique, just a demo how to perform HID attack using Android instead of rubber ducky. For targeted Android device it ...

android_hid

androidhid 使用Android模拟Rubber Ducky攻击目标Android设备或PC 使用Android进行HID攻击 使用Android模拟Rubber Ducky攻击Android或Windows。这不是新技术，只是演示如何使用Android代替rubber ducky进行HID攻击。对于目标Android设备，不需要设备已root、启用ADB/USB调试并授权，因为攻击者的智能手机表现为已连接的键盘。 hidattack - 脚本包含针对目标Android设备执行（输入）的自定义命令 hidpc - 脚本包含针对目标Windows 10执行（输入）的自定义命令...

powershell-backdoor-generator

/ 免责声明： 本程序仅供教育用途使用。使用本程序即表示您理解其使用相关的潜在风险。 未经适当授权，不得在任何系统或网络上使用本程序。禁止未经授权的使用。 本程序创建者对因使用本程序造成的任何损害、法律后果或数据丢失不承担任何责任。 您有责任确保在使用本程序时遵守所有适用法律和法规。 请负责任且道德地使用本程序，尊重他人的隐私和安全。 / powershell-backdoor 用PowerShell编写、Python混淆的反向后门工具，每次构建后生成新签名以规避检测。该工具能够为Flipper Zero和Hak5 USB Rubber...

Ducky-Exploit

Ducky-Exploit 简介 Ducky Exploit 是一个Python框架，帮助我们将 Digispark 编码为 Rubber Ducky。 该脚本已测试于 Kali Linux 18.2 Ubuntu 18.04 Windows 兼容 Python2 和 Python3 键盘支持类型 美式键盘 使用方法 root@kitploit: git clone https://github.com/itsmehacker5/Ducky-Exploit.git cd Ducky-Exploit/ python ducky.py 截图...

arducky

Arducky - Intérprete de Ducky Script para Arduino Este proyecto tiene como objetivo crear una alternativa económica pero no menos eficiente al USB Rubber Ducky de Hak5. Introducción El USB Rubber Ducky es un HID Human Interface Device programable con un lenguaje de scripting simple que permite a...

bad_ducky

Bad Ducky Resumen Bad Ducky es otro clon de Rubber Ducky. Está basado en la placa CJMCU BadUsb ATMEGA32u4 - clon de Arduino Leonardo con lector de tarjetas integrado, que se puede comprar en eBay o aliexpress. Mi objetivo era crear algo compatible con los scripts de Rubber Ducky, con la capacidad...

bad_ducky

Bad Ducky Summary Bad Ducky is yet another Rubber Ducky clone. It is based on CJMCU BadUsb ATMEGA32u4 - Arduino Leonardo clone board with onboard card reader, which you can buy on ebay or aliexpress. My goal was to create something compatible with Rubber Ducky scripts, while having ability to...

pwnKit

pwnKit Acerca de: Título: pwnKit Descripción: Escalada de privilegios en sistemas operativos tipo Unix AUTOR: drapl0n Versión: 1.0 Categoría: Escalada de Privilegios Objetivo: Sistemas operativos tipo Unix Modos de ataque: HID pwnKit es un payload de USB-Rubber-Ducky para escalada de privilegios,...

Exploit for Improper Authentication in Google Android

DEDSECBKIF DEDSECBKIF is a keystroke injection tool for Androi...

WiFi-password-stealer - Simple Windows And Linux Keystroke Injection Tool That Exfiltrates Stored WiFi Data (SSID And Password)

Have you ever watched a film where a hacker would plug-in, seemingly ordinary, USB drive into a victim's computer and steal data from it? - A proper wet dream for some. Disclaimer : All content in this project is intended for security research purpose only. Introduction During the summer of 2022,...

Powershell-Backdoor-Generator - Obfuscated Powershell Reverse Backdoor With Flipper Zero And USB Rubber Ducky Payloads

Reverse backdoor written in Powershell and obfuscated with Python. Allowing the backdoor to have a new signature after every run. Also can generate auto run scripts for Flipper Zero and USB Rubber Ducky. usage: listen.py -h --ip-address IPADDRESS --port PORT --random --out OUT --verbose --delay...

USB “Rubber Ducky” Attack Tool

The USB Rubber Ducky is getting better and better. Already, previous versions of the Rubber Ducky could carry out attacks like creating a fake Windows pop-up box to harvest a users login credentials or causing Chrome to send all saved passwords to an attackers webserver. But these attacks had to ...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

pwnKit About: Title: pwnKit Description: Privilege esc...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

pwnKit About: Title: pwnKit Description: Privilege esc...

CVE-2021-41096

Rucky is a USB HID Rubber Ducky Launch Pad for Android. Versions 2.2 and earlier for release builds and versions 425 and earlier for nightly builds suffer from use of a weak cryptographic algorithm RSA/ECB/PKCS1Padding. The issue will be patched in v2.3 for release builds and 426 onwards for...

CVE-2021-41096

Rucky is a USB HID Rubber Ducky Launch Pad for Android. Versions 2.2 and earlier for release builds and versions 425 and earlier for nightly builds suffer from use of a weak cryptographic algorithm RSA/ECB/PKCS1Padding. The issue will be patched in v2.3 for release builds and 426 onwards for...

Security feature bypass

Rucky is a USB HID Rubber Ducky Launch Pad for Android. Versions 2.2 and earlier for release builds and versions 425 and earlier for nightly builds suffer from use of a weak cryptographic algorithm RSA/ECB/PKCS1Padding. The issue will be patched in v2.3 for release builds and 426 onwards for...

CVE-2021-41096

The CVE-2021-41096 entry concerns the Rucky Android USB HID Rubber Ducky Launch Pad. Affected releases (versions 2.2 and earlier for release builds; 425 and earlier for nightly builds) use a weak cryptographic algorithm (RSA/ECB/PKCS1Padding) for encryption. The issue is addressed in v2.3 for rel...