Monday, September 2, 2019

Bad USB

https://mashable.com/2014/10/03/bad-usb/

https://shopee.com.my/DIY-WIFI-Version-Bad-USB-RUBBER-DUCKY-TEENSYfor-Hak5-HiD-Lazy-U-Disk-Arduino-IED-i.78780680.1560641635



https://www.youtube.com/watch?v=hEpk56Qy5W0


DIY Using digispark:
https://www.youtube.com/watch?v=fGmGBa-4cYQ

Additional boards manager:  http://digistump.com/package_digistump_index.json

https://hackernoon.com/low-cost-usb-rubber-ducky-pen-test-tool-for-3-using-digispark-and-duck2spark-5d59afc1910

https://www.nixu.com/blog/hidden-gem-low-cost-digispark-usb-now-quacks-duckyscript

https://www.lelong.com.my/digispark-kickstarter-attiny85-usb-development-module-board-sainapse-io-F1625020-2007-01-Sale-I.htm

https://www.youtube.com/watch?v=b5E0u4qNH4s

https://www.youtube.com/watch?v=YXWxEzLHXuw

Lazada with sdcard:

https://www.youtube.com/watch?v=3A53g0j-ugw

https://www.youtube.com/watch?v=ksvo1WDYQ7s  (program duckduino onto device, then put duck scripts on sdcard)


Lazada pendrive with keychain:

https://www.youtube.com/watch?v=FChGkR38Eso

https://www.lazada.com.my/products/cfb-badusb-beetle-bad-usb-microcontroller-atmega32u4-virtual-keyboard-i543946575-s1079160374.html

https://www.youtube.com/watch?v=Z93Cp6XkJio

http://www.areresearch.net/2017/12/some-fun-with-bad-usb-devices-not.html

DIY Bad USB With Wifi:

https://www.youtube.com/watch?v=Utq4C9S3-uI

Seytonic's Playlist:

https://www.youtube.com/playlist?list=PL2YepVFF1azFjaLd5PYCYg2lKeB6t1xcj


Buying List for Seytonic's project:

https://www.lelong.com.my/atmega32u4-pro-micro-5v-16mhz-atmega-32u4-arduino-board-nadieleczone-F1646733-2007-01-Sale-I.htm

https://www.lelong.com.my/usb-adapter-type-male-micro-b-male-newfroggyonline-214224512-2019-09-Sale-P.htm

https://www.lelong.com.my/5-unit-mini-tactile-switch-push-button-momentary-arduino-pic-nadieleczone-F1199273-2007-01-Sale-I.htm

https://www.lelong.com.my/microsd-card-module-sainapse-io-F810741-2007-01-Sale-I.htm

https://www.lelong.com.my/dip-switch-2-54mm-2p-3p-4p-5p-8p-littlecraft-I5292329-2007-01-Sale-I.htm

About Arduino Pro Micro:
https://deskthority.net/wiki/Arduino_Pro_Micro

Buying List for Seytonic's DIY Wireless Bad USB:

( based on this:  https://www.youtube.com/watch?v=Utq4C9S3-uI&t=11s  )
Only need Arduino Pro Micro and microUSB Adapter, you can reuse your existing NodeMCU.

https://www.lelong.com.my/atmega32u4-pro-micro-5v-16mhz-atmega-32u4-arduino-board-nadieleczone-F1646733-2007-01-Sale-I.htm

https://www.lelong.com.my/usb-adapter-type-male-micro-b-male-newfroggyonline-214224512-2019-09-Sale-P.htm ( Optional, can use normal microusb cable )

Another reference similar to Seytonic:
( Supremeduck )
https://github.com/michalmonday/supremeDuck



Raspberry PI Bad USB:
https://www.youtube.com/watch?time_continue=1&v=I_BjCdJlCo4
https://maltronics.com/blogs/blog/exfiltrating-files-with-a-pi-zero

Ducky Script Payloads:
https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Payloads


--------------------------- DIGISPARK ---------------------------------
Ducky Script to Digispark converter:
https://github.com/CedArctic/digiQuack [ C++  Some errors ]
https://github.com/uslurper/digiduck  [ Python  Not working ]
https://github.com/mame82/duck2spark  [ Python ]
https://github.com/toxydose/Duckyspark [ Python - USE THIS]


Digiduck howto:
https://github.com/uslurper/digiduck/wiki/A-Brief-Overview-of-Digiduck-and-Why-It-Isn't-Working-for-You

Warning:
When adding environment variables C:\Python27 need to add a backward slash like this:
C:\Python27\


What works for me for Digispark:
https://0x00sec.org/t/a-complete-beginner-friendly-guide-to-the-digispark-badusb/8002
https://github.com/CedArctic/DigiSpark-Scripts

I downloaded Duckyspark_translator.py from https://github.com/toxydose/Duckyspark and renamed it to duckspark.py

Also followed Seytonic's video:
https://www.youtube.com/watch?v=fGmGBa-4cYQ&list=PL2YepVFF1azFjaLd5PYCYg2lKeB6t1xcj&index=6

DigiKeyboard.h reference:
https://github.com/digistump/DigistumpArduino/blob/master/digistump-avr/libraries/DigisparkKeyboard/DigiKeyboard.h

C:\Users\paul\AppData\Local\Arduino15\packages\digistump\hardware\avr\1.6.7\libraries\DigisparkKeyboard

If you find some keys not defined, then you can include the defines yourself in the .ino code
Try converting some ducky script with duckyspark and you can see an example.

They keys are missing from DigiKeyboard.h and you will need to add them manually:

#define KEY_ESC     41
#define KEY_BACKSPACE 42
#define KEY_TAB     43
#define KEY_PRT_SCR 70
#define KEY_DELETE  76
#define KEY_ARROW_RIGHT 0x4F
#define KEY_ARROW_DOWN  0x51
#define KEY_ARROW_UP    0x52

Upload badusb scripts to http://ezishopper.site/badusb/  for experiments. It is a namecheap ac.





No comments:

Post a Comment