https://resources.infosecinstitute.com/creating-undetectable-custom-ssh-backdoor-python-z/#gref
Sunday, September 8, 2019
Monday, September 2, 2019
Bad USB
https://mashable.com/2014/10/03/bad-usb/
https://shopee.com.my/DIY-WIFI-Version-Bad-USB-RUBBER-DUCKY-TEENSYfor-Hak5-HiD-Lazy-U-Disk-Arduino-IED-i.78780680.1560641635
https://www.youtube.com/watch?v=hEpk56Qy5W0
DIY Using digispark:
https://www.youtube.com/watch?v=fGmGBa-4cYQ
Additional boards manager: http://digistump.com/package_digistump_index.json
https://hackernoon.com/low-cost-usb-rubber-ducky-pen-test-tool-for-3-using-digispark-and-duck2spark-5d59afc1910
https://www.nixu.com/blog/hidden-gem-low-cost-digispark-usb-now-quacks-duckyscript
https://www.lelong.com.my/digispark-kickstarter-attiny85-usb-development-module-board-sainapse-io-F1625020-2007-01-Sale-I.htm
https://www.youtube.com/watch?v=b5E0u4qNH4s
https://www.youtube.com/watch?v=YXWxEzLHXuw
Lazada with sdcard:
https://www.youtube.com/watch?v=3A53g0j-ugw
https://www.youtube.com/watch?v=ksvo1WDYQ7s (program duckduino onto device, then put duck scripts on sdcard)
Lazada pendrive with keychain:
https://www.youtube.com/watch?v=FChGkR38Eso
https://www.lazada.com.my/products/cfb-badusb-beetle-bad-usb-microcontroller-atmega32u4-virtual-keyboard-i543946575-s1079160374.html
https://www.youtube.com/watch?v=Z93Cp6XkJio
http://www.areresearch.net/2017/12/some-fun-with-bad-usb-devices-not.html
DIY Bad USB With Wifi:
https://www.youtube.com/watch?v=Utq4C9S3-uI
Seytonic's Playlist:
https://www.youtube.com/playlist?list=PL2YepVFF1azFjaLd5PYCYg2lKeB6t1xcj
Buying List for Seytonic's project:
https://www.lelong.com.my/atmega32u4-pro-micro-5v-16mhz-atmega-32u4-arduino-board-nadieleczone-F1646733-2007-01-Sale-I.htm
https://www.lelong.com.my/usb-adapter-type-male-micro-b-male-newfroggyonline-214224512-2019-09-Sale-P.htm
https://www.lelong.com.my/5-unit-mini-tactile-switch-push-button-momentary-arduino-pic-nadieleczone-F1199273-2007-01-Sale-I.htm
https://www.lelong.com.my/microsd-card-module-sainapse-io-F810741-2007-01-Sale-I.htm
https://www.lelong.com.my/dip-switch-2-54mm-2p-3p-4p-5p-8p-littlecraft-I5292329-2007-01-Sale-I.htm
About Arduino Pro Micro:
https://deskthority.net/wiki/Arduino_Pro_Micro
Buying List for Seytonic's DIY Wireless Bad USB:
( based on this: https://www.youtube.com/watch?v=Utq4C9S3-uI&t=11s )
Only need Arduino Pro Micro and microUSB Adapter, you can reuse your existing NodeMCU.
https://www.lelong.com.my/atmega32u4-pro-micro-5v-16mhz-atmega-32u4-arduino-board-nadieleczone-F1646733-2007-01-Sale-I.htm
https://www.lelong.com.my/usb-adapter-type-male-micro-b-male-newfroggyonline-214224512-2019-09-Sale-P.htm ( Optional, can use normal microusb cable )
Another reference similar to Seytonic:
( Supremeduck )
https://github.com/michalmonday/supremeDuck
Raspberry PI Bad USB:
https://www.youtube.com/watch?time_continue=1&v=I_BjCdJlCo4
https://maltronics.com/blogs/blog/exfiltrating-files-with-a-pi-zero
Ducky Script Payloads:
https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Payloads
--------------------------- DIGISPARK ---------------------------------
Ducky Script to Digispark converter:
https://github.com/CedArctic/digiQuack [ C++ Some errors ]
https://github.com/uslurper/digiduck [ Python Not working ]
https://github.com/mame82/duck2spark [ Python ]
https://github.com/toxydose/Duckyspark [ Python - USE THIS]
Digiduck howto:
https://github.com/uslurper/digiduck/wiki/A-Brief-Overview-of-Digiduck-and-Why-It-Isn't-Working-for-You
Warning:
When adding environment variables C:\Python27 need to add a backward slash like this:
C:\Python27\
What works for me for Digispark:
https://0x00sec.org/t/a-complete-beginner-friendly-guide-to-the-digispark-badusb/8002
https://github.com/CedArctic/DigiSpark-Scripts
I downloaded Duckyspark_translator.py from https://github.com/toxydose/Duckyspark and renamed it to duckspark.py
Also followed Seytonic's video:
https://www.youtube.com/watch?v=fGmGBa-4cYQ&list=PL2YepVFF1azFjaLd5PYCYg2lKeB6t1xcj&index=6
DigiKeyboard.h reference:
https://github.com/digistump/DigistumpArduino/blob/master/digistump-avr/libraries/DigisparkKeyboard/DigiKeyboard.h
C:\Users\paul\AppData\Local\Arduino15\packages\digistump\hardware\avr\1.6.7\libraries\DigisparkKeyboard
If you find some keys not defined, then you can include the defines yourself in the .ino code
Try converting some ducky script with duckyspark and you can see an example.
They keys are missing from DigiKeyboard.h and you will need to add them manually:
#define KEY_ESC 41
#define KEY_BACKSPACE 42
#define KEY_TAB 43
#define KEY_PRT_SCR 70
#define KEY_DELETE 76
#define KEY_ARROW_RIGHT 0x4F
#define KEY_ARROW_DOWN 0x51
#define KEY_ARROW_UP 0x52
Upload badusb scripts to http://ezishopper.site/badusb/ for experiments. It is a namecheap ac.
https://shopee.com.my/DIY-WIFI-Version-Bad-USB-RUBBER-DUCKY-TEENSYfor-Hak5-HiD-Lazy-U-Disk-Arduino-IED-i.78780680.1560641635
https://www.youtube.com/watch?v=hEpk56Qy5W0
DIY Using digispark:
https://www.youtube.com/watch?v=fGmGBa-4cYQ
Additional boards manager: http://digistump.com/package_digistump_index.json
https://hackernoon.com/low-cost-usb-rubber-ducky-pen-test-tool-for-3-using-digispark-and-duck2spark-5d59afc1910
https://www.nixu.com/blog/hidden-gem-low-cost-digispark-usb-now-quacks-duckyscript
https://www.lelong.com.my/digispark-kickstarter-attiny85-usb-development-module-board-sainapse-io-F1625020-2007-01-Sale-I.htm
https://www.youtube.com/watch?v=b5E0u4qNH4s
https://www.youtube.com/watch?v=YXWxEzLHXuw
Lazada with sdcard:
https://www.youtube.com/watch?v=3A53g0j-ugw
https://www.youtube.com/watch?v=ksvo1WDYQ7s (program duckduino onto device, then put duck scripts on sdcard)
Lazada pendrive with keychain:
https://www.youtube.com/watch?v=FChGkR38Eso
https://www.lazada.com.my/products/cfb-badusb-beetle-bad-usb-microcontroller-atmega32u4-virtual-keyboard-i543946575-s1079160374.html
https://www.youtube.com/watch?v=Z93Cp6XkJio
http://www.areresearch.net/2017/12/some-fun-with-bad-usb-devices-not.html
DIY Bad USB With Wifi:
https://www.youtube.com/watch?v=Utq4C9S3-uI
Seytonic's Playlist:
https://www.youtube.com/playlist?list=PL2YepVFF1azFjaLd5PYCYg2lKeB6t1xcj
Buying List for Seytonic's project:
https://www.lelong.com.my/atmega32u4-pro-micro-5v-16mhz-atmega-32u4-arduino-board-nadieleczone-F1646733-2007-01-Sale-I.htm
https://www.lelong.com.my/usb-adapter-type-male-micro-b-male-newfroggyonline-214224512-2019-09-Sale-P.htm
https://www.lelong.com.my/5-unit-mini-tactile-switch-push-button-momentary-arduino-pic-nadieleczone-F1199273-2007-01-Sale-I.htm
https://www.lelong.com.my/microsd-card-module-sainapse-io-F810741-2007-01-Sale-I.htm
https://www.lelong.com.my/dip-switch-2-54mm-2p-3p-4p-5p-8p-littlecraft-I5292329-2007-01-Sale-I.htm
About Arduino Pro Micro:
https://deskthority.net/wiki/Arduino_Pro_Micro
Buying List for Seytonic's DIY Wireless Bad USB:
( based on this: https://www.youtube.com/watch?v=Utq4C9S3-uI&t=11s )
Only need Arduino Pro Micro and microUSB Adapter, you can reuse your existing NodeMCU.
https://www.lelong.com.my/atmega32u4-pro-micro-5v-16mhz-atmega-32u4-arduino-board-nadieleczone-F1646733-2007-01-Sale-I.htm
https://www.lelong.com.my/usb-adapter-type-male-micro-b-male-newfroggyonline-214224512-2019-09-Sale-P.htm ( Optional, can use normal microusb cable )
Another reference similar to Seytonic:
( Supremeduck )
https://github.com/michalmonday/supremeDuck
Raspberry PI Bad USB:
https://www.youtube.com/watch?time_continue=1&v=I_BjCdJlCo4
https://maltronics.com/blogs/blog/exfiltrating-files-with-a-pi-zero
Ducky Script Payloads:
https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Payloads
--------------------------- DIGISPARK ---------------------------------
Ducky Script to Digispark converter:
https://github.com/CedArctic/digiQuack [ C++ Some errors ]
https://github.com/uslurper/digiduck [ Python Not working ]
https://github.com/mame82/duck2spark [ Python ]
https://github.com/toxydose/Duckyspark [ Python - USE THIS]
Digiduck howto:
https://github.com/uslurper/digiduck/wiki/A-Brief-Overview-of-Digiduck-and-Why-It-Isn't-Working-for-You
Warning:
When adding environment variables C:\Python27 need to add a backward slash like this:
C:\Python27\
What works for me for Digispark:
https://0x00sec.org/t/a-complete-beginner-friendly-guide-to-the-digispark-badusb/8002
https://github.com/CedArctic/DigiSpark-Scripts
I downloaded Duckyspark_translator.py from https://github.com/toxydose/Duckyspark and renamed it to duckspark.py
Also followed Seytonic's video:
https://www.youtube.com/watch?v=fGmGBa-4cYQ&list=PL2YepVFF1azFjaLd5PYCYg2lKeB6t1xcj&index=6
DigiKeyboard.h reference:
https://github.com/digistump/DigistumpArduino/blob/master/digistump-avr/libraries/DigisparkKeyboard/DigiKeyboard.h
C:\Users\paul\AppData\Local\Arduino15\packages\digistump\hardware\avr\1.6.7\libraries\DigisparkKeyboard
If you find some keys not defined, then you can include the defines yourself in the .ino code
Try converting some ducky script with duckyspark and you can see an example.
They keys are missing from DigiKeyboard.h and you will need to add them manually:
#define KEY_ESC 41
#define KEY_BACKSPACE 42
#define KEY_TAB 43
#define KEY_PRT_SCR 70
#define KEY_DELETE 76
#define KEY_ARROW_RIGHT 0x4F
#define KEY_ARROW_DOWN 0x51
#define KEY_ARROW_UP 0x52
Upload badusb scripts to http://ezishopper.site/badusb/ for experiments. It is a namecheap ac.
Sunday, September 1, 2019
Wifi Hacking
Evil Twin Attack:
https://pikdo.net/p/faisalyahya/2118124885757667190_187669594
Wifi Pineapple:
https://shop.hak5.org/products/wifi-pineapple
https://www.lazada.com.my/products/1pcs-wifi-pineapple-wireless-network-wifipineapple-wireless-security-auditing-hak5-high-quality-i557402589-s1108500118.html
https://pikdo.net/p/faisalyahya/2118124885757667190_187669594
Wifi Pineapple:
https://shop.hak5.org/products/wifi-pineapple
https://www.lazada.com.my/products/1pcs-wifi-pineapple-wireless-network-wifipineapple-wireless-security-auditing-hak5-high-quality-i557402589-s1108500118.html
Wifi Jammer with Raspberry PI
https://dephace.com/how-to-make-a-wifi-jammer-with-raspberry-pi-3/
https://www.evilsocket.net/2018/07/28/Project-PITA-Writeup-build-a-mini-mass-deauther-using-bettercap-and-a-Raspberry-Pi-Zero-W/
https://www.shellvoide.com/wifi/how-to-turn-raspberry-pi-into-wireless-jammer/
https://www.hackster.io/mehedishakeel/make-a-wifi-jammer-using-raspberry-pi-3-fb73dd
https://www.evilsocket.net/2018/07/28/Project-PITA-Writeup-build-a-mini-mass-deauther-using-bettercap-and-a-Raspberry-Pi-Zero-W/
https://www.shellvoide.com/wifi/how-to-turn-raspberry-pi-into-wireless-jammer/
https://www.hackster.io/mehedishakeel/make-a-wifi-jammer-using-raspberry-pi-3-fb73dd
Tuesday, August 27, 2019
Hacking Windows Password
Cp cmd.exe to utilman.exe
https://www.youtube.com/watch?v=meqXmnXcgBc
Using chntpw
https://www.youtube.com/watch?v=O4j1j3cu-HI
https://www.youtube.com/watch?v=meqXmnXcgBc
Using chntpw
https://www.youtube.com/watch?v=O4j1j3cu-HI
Dual Booting Linux
Dual boot:
https://docs.kali.org/installation/dual-boot-kali-with-windows
Install on entire hdd:
https://docs.kali.org/installation/kali-linux-hard-disk-install
https://docs.kali.org/installation/dual-boot-kali-with-windows
Install on entire hdd:
https://docs.kali.org/installation/kali-linux-hard-disk-install
Monday, August 26, 2019
Cloning USB drive
Doesn't work because of multiple partitions on source usb:
https://www.youtube.com/watch?time_continue=133&v=PYLDTrxwt80
https://www.backup-utility.com/clone/usb-clone-tool-4348.html
This one works:
Need to use a linux PC.
fdisk -l
/dev/sda
this is your hard disk
Insert source usb
fdisk -l
/dev/sdb1
/dev/sdb2
Insert destination disk:
fdisk -l
/dev/sdc
Then, do:
dd if = /dev/sdb of=/dev/sdc bs=4096 conv=noerror
Ref:
https://www.pclinuxos.com/forum/index.php/topic,118627.15.html?PHPSESSID=a6t30g1s6jouarhddbjqdbm0j5
https://www.youtube.com/watch?time_continue=133&v=PYLDTrxwt80
https://www.backup-utility.com/clone/usb-clone-tool-4348.html
This one works:
Need to use a linux PC.
fdisk -l
/dev/sda
this is your hard disk
Insert source usb
fdisk -l
/dev/sdb1
/dev/sdb2
Insert destination disk:
fdisk -l
/dev/sdc
Then, do:
dd if = /dev/sdb of=/dev/sdc bs=4096 conv=noerror
Ref:
https://www.pclinuxos.com/forum/index.php/topic,118627.15.html?PHPSESSID=a6t30g1s6jouarhddbjqdbm0j5
Subscribe to:
Posts (Atom)