keysweeper

KEYSWEEPER // SIGINT // SAMY.PL // REL TO ALL // APPLIED HACKING KeySweeper KeySweeper 是一款隐蔽的基于 Arduino 的设备，伪装成一个可正常工作的 USB 墙式充电器，能够以无线方式被动嗅探、解密、记录并（通过 GSM）回传附近任何微软无线键盘的所有按键输入。 所有按键都会在线和本地记录。当输入触发词、用户名或 URL 时，设备会发送 SMS 警报，从而暴露密码。如果被拔出电源，KeySweeper 仍会依靠内置电池继续运行，并在重新通电后自动充电。基于 Web 的工具支持实时按键监控。 现场演示...

CVE-2022-35860

CVE-2022-35860 affects Corsair K63 Wireless keyboard (version 3.1.3). The root cause is missing AES encryption in the 2.4 GHz wireless channel, enabling physically proximate attackers to inject keystrokes and sniff them over the radio. The vulnerability is documented across multiple sources (NVD/...

CVE-2022-35860: Missing Encryption of Sensitive Data

Missing AES encryption in Corsair K63 Wireless 3.1.3 allows physically proximate attackers to inject and sniff keystrokes via 2.4 GHz radio transmissions...

CVE-2022-35860

Missing AES encryption in Corsair K63 Wireless 3.1.3 allows physically proximate attackers to inject and sniff keystrokes via 2.4 GHz radio transmissions...

Hackers can sniff keystrokes from thin air

By Elinor Mills, CNET Presenters at the CanSecWest security conference detailed on Thursday how they can sniff data by analyzing keystroke vibrations using a laser trained on a shiny laptop or through electrical signals coming from a PC connected to a PS/2 keyboard and plugged into a socket. Usin...