USP

USP Features This Go program establishes persistence on a Linux system by creating a udev rule that triggers the execution of a specified payload binary or script. It offers two trigger options: USB Persistence: The payload is executed whenever a USB device is inserted. Boot Persistence: The...

android_hid

androidhid Use Android as Rubber Ducky against targeted Android device or PC HID attack using Android Using Android as Rubber Ducky against Android or Windows. This is not a new technique, just a demo how to perform HID attack using Android instead of rubber ducky. For targeted Android device it ...

duckLogger

DuckLogger DuckLogger is an ESP32-S3–based USB Key Logger. It logs keystrokes in a text file, and provides wireless access to download logs through a built-in Wi-Fi access point. Recreating this project doesn't require any custom PCB. Hardware used here is less than $10 in total on places like...

mvt

Mobile Verification Toolkit !IMPORTANT We recently merged the "v3" branch. This introduced breaking changes. If you relied on mvt output in other scripts They might have broken. More details: https://github.com/mvt-project/mvt/issues/757 Mobile Verification Toolkit MVT is a collection of utilitie...

PortGuard

Port-Guard Port-Guard is a USB port management and security tool designed for Debian. It allows you to control access to USB devices , maintain a custom whitelist , and run an automatic background scan to detect any unauthorized connection. ⚠️ Beta version : The software is functional, but...

usbsas

usbsas is a free and open source GPLv3 tool and framework for securely reading untrusted USB mass storage devices. Overview Following the concept of defense in depth and the principle of least privilege, usbsas's goal is to reduce the attack surface of the USB stack. To achieve this, most of the...

CVE-2024-31317-PoC

CVE-2024-31317 Proof of Concept This repository contains a collection of Proof of Concept scripts for the CVE-2024-31317 vulnerability in Android systems. Script Description CVE-2024-31317-android11-.sh: Exploit script for Android 11- devices. CVE-2024-31317-android12.sh: Exploit script for Andro...

CVE-2017-14187_PoC_ARMv7

CVE-2017-14187 PoC Proof-of-Concept of Local Privilege Escalation for FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8, and below 5.2 Triggered by fnsysctl and USB so physical access required. This PoC spawns local root shell by exploiting CVE-2017-14187. Write-up Korean English TL;DR 1. fnsysctl cp...

uboatdemo

uboatdemo A demo server for CVE-2016-3955 UBOAT Performs Linux heap buffer overflow, when USB/IP client begins sending control URBs. Building The server is a standard simple Go program. You can build it the usual way assuming you have Go setup and configured according to official instructions wit...

ghidra

Dockerized Ghidra Build From the root directory of your Ghidra release, run the following command. ./docker/build-docker-image.sh This will build the ghidra docker image with a tag corresponding to the release version of Ghidra. The MODE environment variable The Ghidra Docker Container supports t...

CatSniffer

CatSniffer Where to buy and learn more CatSniffer 😼 is an original multiprotocol, and multiband board made for sniffing, communicating, and attacking IoT Internet of Things devices. It was designed as a highly portable USB stick that integrates the new chips TI CC1352, Semtech SX1262, and an RP20...

ATAboy

If you don't want to build your own, the hardware can be purchased here: https://obsoletetech.us/products/ataboy-an-open-source-legacy-ide-usb-bridge ATAboy is designed for retro computing enthusiasts, data recovery experts, and archivists. Read and write the oldest of IDE hard drives, without th...

AutoGadgetFS

Ethereum Donations : 0xA919e40ddB0563918dDc174320D91992e0048477 Table of Contents 1. What's AutoGadgetFS ? 2. Requirments 3. The Setup a. Device testing only b. Minimal agfs in the middle setup c. Complete agfs in the middle setup with debugging support 4. USB Device class support 5. Capabilities...

arducky

Arducky - Arduino Ducky Script Interpreter This project aims to create a cheap alternative but not less efficient to Hak5's USB Rubber Ducky. Introduction The USB Rubber Ducky is a HID Human Interface Device programmable with a simple scripting language allowing penetration testers to quickly and...

aiptekirq Heap Buffer Overflow DoS

The vulnerability of the aiptekirq function in the drivers/input/tablet/aiptek.c module of the Linux kernel is related to the lack of data validation for data received in interrupt packets from potentially compromised USB devices. Exploiting this vulnerability could allow an attacker to cause...

tap-ducky

TapDucky - Android USB HID Keystroke Injector TapDucky - Android USB HID Keystroke Injector Open-source DuckyScript runner for rooted Android with USB Gadget ConfigFS support TapDucky lets you create, customize, schedule, and run DuckyScript on Android by emulating a USB keyboard, mouse, or...

rinhit

RinHit RinHit - macOS ecosystem reconnaissance framework. Collects artifacts from the Apple ecosystem to build timelines of network activity, cross-device identity, and physical location correlation. This is the open-source reconnaissance module. The closed-source Swift payload rinhit-agent is...

linux-fingerprint-r503

linux-fingerprint-r503 — fingerprint login for Linux using a Grow R503 + Arduino A from-parts USB fingerprint reader for Linux desktops. Total parts cost under $15. Drop-in replacement for upstream fprintd — PAM, KDE Settings, GNOME Settings, fprintd-verify, sudo with finger, screen-unlock with...

pico-usb-wifi

= pico-usb-wifi :toc: macro :toclevels: 3 :idprefix: :idseparator: - pico-usb-wifi is firmware for the Raspberry Pi Pico W that turns it into a driverless USB Wi-Fi adapter, enumerating as a USB CDC-NCM device. :figure-caption: AI Slop .pico-usb-wifi Diagram...

facedancer

Facedancer 3.0 This repository houses the next generation of Facedancer software. Descended from the original GoodFET-based Facedancer, this repository provides a python module that provides expanded Facedancer support -- including support for multiple boards and some pretty significant new...