android_hid

androidhid Use Android as Rubber Ducky against targeted Android device or PC HID attack using Android Using Android as Rubber Ducky against Android or Windows. This is not a new technique, just a demo how to perform HID attack using Android instead of rubber ducky. For targeted Android device it ...

P4wnP1_aloa

P4wnP1 A.L.O.A. P4wnP1 A.L.O.A. by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Appliance". 0. How to install The latest image could be found under release tab. The...

OverThruster

OverThruster “我被电离了，但现在没事了。” -巴克鲁·班赛 通用信息 OverThruster 是一个为 Arduino 生成 HID 攻击用 sketches 的工具。它围绕采用 ATMEGA32U4 芯片的设备设计，例如 CJMCU-BEETLE，或最近在 ebay 和 aliexpress 上出现的形似 U 盘但内部包含 Arduino 的新型 LilyGo “BadUSB” 设备。我编写这个工具是因为其他少数类似工具没有那么多定制选项，比如 UAC 绕过选项或通知气泡选项。我想创造一种能够快速生成自定义 payload 且除了标准 Python 库和 Arduino...

logitech-ipc-protocol

logitech-ipc-protocol Reverse-engineered documentation of the Logi Options+ agent IPC protocol. Enables programmatic control of Logitech multi-host devices host switching, device queries without raw HID access, on both macOS and Windows. The protocol has not been publicly documented before this...

flashsploit

Exploitation Framework for ATtiny85 HID Attacks Twitter - Telegram - Blog Available in Flashsploit is an Exploitation Framework for Attacks using ATtiny85 HID Devices such as Digispark USB Development Board, flashsploit generates Arduino IDE Compatible .ino Scripts based on User Input and then...

flashsploit

ATtiny85 HID攻击利用框架 Twitter - Telegram - Blog 支持语言 Flashsploit 是一个针对使用 ATtiny85 HID 设备（例如 Digispark USB 开发板）进行攻击的利用框架。flashsploit 根据用户输入生成 Arduino IDE 兼容的 .ino 脚本，然后在脚本需要时在 Metasploit-Framework 中启动监听器。总结：自动脚本生成与自动化 msfconsole。 功能 TODO：添加 Linux 和 OSX 脚本 Windows...

Chimera

Chimera Hardware Emulation & Proximity Exploitation Why Hak5 gear is heavy and obvious. My phone has a full Linux kernel in it, so I made it do the same job — HID emulation, RNDIS, mass storage, the whole thing — straight through ConfigFS. No extra hardware. No cables dangling out of a bag. Plug...

Pi-Zero-2W-Bad-USB

Raspberry Pi Zero 2 W BadUSB HID Toolkit A programmable BadUSB / HID attack platform built on a Raspberry Pi Zero 2 W. The Pi enumerates as a USB composite device keyboard plus an optional read-only mass-storage volume and executes Ducky-Script-style payloads against the host it's plugged into...

Android-PIN-Bruteforce

🔓📱 Android-PIN-Bruteforce Unlock an Android phone or device by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! 📱 How it works It uses a USB OTG cable to connect the locked phone to the Nethunter device. It emulates a keyboard,...

CVE-2026-69731

CVE-2026-69731 is a heap-based buffer overflow in the HID class driver that allows an authorized attacker to perform a local privilege escalation . The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) , with a low-complexity attack vector requiring no user interaction. No exploitation details...

EUVD-2026-73598

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally...

zerojack

ZeroJack A tool for performing MouseJack keystrokes injection attack. ⚠️ Disclaimer The project was created for educational purposes. I am not responsible for any malicious usage of the project and the information provided here. 👾 About the project The project was created for educational purposes...

Kautilya

Kautilya Kautilya is a toolkit which provides various payloads for a Human Interface Device which may help in breaking in a computer during penetration tests. By nikhilmitt List of Payloads Windows Gather Gather Information Hashdump and Exfiltrate Keylog and Exfiltrate Sniffer WLAN keys dump Get...

tap-ducky

TapDucky - Android USB HID 击键注入器 TapDucky - Android USB HID 击键注入器 用于已 Root 安卓设备的开源 DuckyScript 执行器，支持 USB Gadget ConfigFS TapDucky 允许您通过模拟 USB 键盘、鼠标或复合 HID 设备，在 Android 上创建、自定义、调度和运行 DuckyScript，用于授权测试和自动化。它包括有效载荷参数化、多个调度器触发器、执行日志以及一个由 GitHub 支持的有效载荷库，具有自动 DuckyScript 验证和可选的 Digispark .ino 转换功能。 ...

ratbag-toolbox

ratbag-toolbox Random reverse engineering knowledge and tools Instructions See our wiki page. Overview Dissectors Protocol| Version| Name ---|---|--- HID++...

Rucky

Rucky Status Build Code Analysis Download App GitHub -blueviolet Nethunter App Store Dow...

BlueDucky

BlueDucky Ver 2.1 Android 🦆 Thanks to all the people at HackNexus. Make sure you come join us on VC ! https://discord.gg/HackNexus NOTES: I will not be able to run this on a laptop or other device outside of a raspberry pi for testing. Due to this, any issues you have will need to be resolved amo...

arducky

Arducky - Arduino Ducky Script Interpreter This project aims to create a cheap alternative but not less efficient to Hak5's USB Rubber Ducky. Introduction The USB Rubber Ducky is a HID Human Interface Device programmable with a simple scripting language allowing penetration testers to quickly and...

GhostTunnel

GhostTunnel GhostTunnel is a covert backdoor transmission method that can be used in an isolated environment. It can attack the target through the HID device only to release the payload agent, then the HID device can be removed after the payload is released. GhostTunnel use 802.11 Probe Request...

Brutal

现在 Teensy 可以用于渗透测试 Teensy 就像橡胶鸭 Rubber Ducky，为什么我选择 Teensy？因为对我来说价格非常便宜。它在无需人为键盘交互（HID 攻击）的情况下执行目标机器上的脚本极为有用。当你插入设备时，它会被检测为键盘，利用微处理器和板载闪存存储，你可以向目标机器发送非常快速的按键序列，并完全攻破它，无论自动运行是否开启。我在安全测试中使用它来运行侦察或枚举脚本、执行反向 shell、利用本地 DLL 劫持/提权漏洞，以及获取所有密码。 现在我正在开发一个新工具，名字叫 Brutal。 Brutal Brutal 是一个工具包，用于快速创建各种...