polyshell

PolyShell: 一个 Bash/Batch/PowerShell 多语言脚本 这是什么 PolyShell 是一个在 Bash、Windows Batch 和 PowerShell 中同时有效的脚本（即一个多语言脚本）。 这使得 PolyShell 成为渗透测试的有用模板，因为它可以在大多数系统上执行，而无需针对特定目标的 payload。 PolyShell 还专门设计为可通过使用 USB Rubby Ducky、MalDuino 或类似设备的输入注入进行交付。 如何使用 作为独立脚本 1. 复制/重命名脚本，使其具有正确的文件扩展名（.sh、.bat 或 .ps1）。 2. 使...

CVE-2026-22013-Hardware-Wallet-USB-Descriptor-Buffer-Overflow

CVE-2026-22013 – Desbordamiento de búfer del descriptor USB en billetera de hardware Código del programa simulación de firmware en C root@kitploit: // hwwalletusb.c - USB descriptor parsing with fixed buffer include void handleusbsetupchar data, int len char descriptor32; if len 0 && data0 == 0x0...

Android-PIN-Bruteforce

🔓📱 Android-PIN-Bruteforce Unlock an Android phone or device by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! 📱 How it works It uses a USB OTG cable to connect the locked phone to the Nethunter device. It emulates a keyboard,...

ShadeBIOS

Shade BIOS El README está presente en cada carpeta Pkg ModuleLoaderPkg: módulo DXE que carga y ejecuta módulos DXE desde una memoria USB ShadeBiosPkg: Paquete principal de Shade BIOS VarPrintPkg: biblioteca que permite imprimir mensajes de depuración o estados en las variables UEFI Autor Kazuki...

FrisbeeLite

Frisbee Lite Un fuzzer de dispositivos USB basado en GUI Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado por Andy Davis, andy punto davis en nccgroup punto com https://www.github.com/nccgroup/FrisbeeLite Publicado bajo AGPL, consulte LICENSE para más...

Excalibur

Excalibur will soon be updated to utilize Metasploit over the Bashbunny. Excalibur Excalibur is an Eternalblue exploit based "Powershell" for the Bashbunny project. It's purpose is to reflect on how a "simple" USB drive can execute the 7 cyber kill chain. Excalibur may be used only for...

phywhispererusb

PhyWhisperer-USB What is this thing? This is a hardware trigger for FI or SCA, which triggers on the USB phy. Be sure to read the documentation at http://phywhispererusb.readthedocs.io/ as well! If you are getting started, there are a few demonstration notebooks showing how to: Sniff Data Stream...

USP

USP Características Este programa en Go establece persistencia en un sistema Linux creando una regla udev que desencadena la ejecución de un payload binario o script especificado. Ofrece dos opciones de activación: Persistencia USB: El payload se ejecuta cada vez que se inserta un dispositivo USB...

Insular

Insular Isolate your big brother app. This is a fork based on the excellent Island. Extra credit to Shelter which inspired me to make the completely FLOSS fork of Island. Documentation On how to enable Insular via adb, cross-profile file access, God mode extending app control to apps outside the...

powershell-backdoor-generator

root@kitploit: / DISCLAIMER: This program is intended for educational purposes only. By using this program, you agree that you understand the potential risks associated with its use. - This program should not be used on any system or network without proper authorization. Unauthorized use is...

android_hid

androidhid Use Android as Rubber Ducky against targeted Android device or PC HID attack using Android Using Android as Rubber Ducky against Android or Windows. This is not a new technique, just a demo how to perform HID attack using Android instead of rubber ducky. For targeted Android device it ...

umap

umap - the USB host security assessment tool Based on Facedancer by Travis Goodspeed: http://goodfet.sourceforge.net/hardware/facedancer21/ Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Andy Davis, andy dot davis at nccgroup dot com...

umap

umap - USB主机安全评估工具 基于Travis Goodspeed的Facedancer: http://goodfet.sourceforge.net/hardware/facedancer21/ 由NCC Group Plc以开源形式发布 - http://www.nccgroup.com/ 由Andy Davis开发，andy dot davis at nccgroup dot com https://www.github.com/nccgroup/umap 基于AGPL许可发布，详见LICENSE文件 文档...

killerbee

KillerBee KillerBee is a Framework and Tools for Testing & Auditing ZigBee and IEEE 802.15.4 Networks Notice usb0.x support is being deprecated/removed Apimote v1 support is being deprected/removed If you require these features please create an issue to explain your usecase and requirements...

Brutal

Now Teensy can be use for penetration Teensy like a rubber ducky , why im choose teensy ? because the price very cheap for me . t’s extremely useful for executing scripts on a target machine without the need for human-to-keyboard interaction HID -ATTACK .When you insert the device, it will be...

WAS

WAS WAS - Wait A Sec : Automatic USB drive malware scanning tool for the security-minded person. Author: Fabio Baroni http://www.pentest.guru/ @Fabiothebest89 How many times have you plugged in a USB drive and double clicked on a file without scanning for malware? I guess, MANY. Wait A Sec! Even ...

usbpcap

USBPcap - Captura de paquetes USB para Windows El instalador para usuarios finales está disponible en: http://desowin.org/usbpcap La siguiente información está destinada únicamente a desarrolladores y usuarios avanzados. Resumen del directorio: USBPcapCMD - aplicación de espacio de usuario de...

uboatdemo

uboatdemo A demo server for CVE-2016-3955 UBOAT Performs Linux heap buffer overflow, when USB/IP client begins sending control URBs. Building The server is a standard simple Go program. You can build it the usual way assuming you have Go setup and configured according to official instructions wit...

android-gadget

android-gadget Summary Certain revisions of the Linux kernel used in Android are affected by issue CVE-2021-39685. Detailed information and a POC for CVE-2021-39685 may be found in the inspector-gadget repository. This repository includes POC targeting few Android specific USB gadgets including:...

zephyr_cve-2021-3625

CVE-2021-3625 This repository contains a few example exploits for CVE-2021-3625. All Zephyr-based usb devices up to and including version 2.5.0 suffer from a buffer overflow allowing readout of up to 65kB. Depending on the actual device this may result of leakage of sensitive data like encryption...