Comments (7)
It can't behave as a twin duck right??
from esploitv2.
Could it be incorporated with mmc so it behaves like USB / UFD, with the intent of camouflage also storage of payload or minimal data.
from esploitv2.
At the moment the option of adding a mmc is not in consideration.
It will encrease price and volume. Which will lead in looking for another USB case.
That will encrease the price even more.
Overall the ratio benefit/time wasted is not worth it.
WHID was mainly created to wraponize usb gadgets or deployed by the attacker itself.
The twin ducky style was not considered intentionally.
P.s. the original repo for Hardware related questions (i.e. Cactus WHID) is https://github.com/whid-injector/WHID
from esploitv2.
Also right now in software if the victim and device are connected to the same network there are several WiFi based exfiltration options HTTP and FTP and a login credential phisher, see the ESPloit readme.
from esploitv2.
Is it possible to automatically connect to victim's network? I tried but could not and had to configure it manually with condition of knowing the condition of password, IP and SSID.
from esploitv2.
You need to be on the same network for those exfiltration methods to work, meaning you need access to their WiFi credentials, so crack it before hand or much easier just do the reverse and have the victims pc connect to the esploit device's network when its running as an access point, see the exfiltration page when connected to the esploit web ui, I believe I show some examples of how to do this. You can also exfiltrate to an online alternative like pastebin instead of straight to the device running esploit.
from esploitv2.
This issue has gone way off course but here is an example of commands to force the victim to connect to ESPloit's network when in access point mode.
Windows: netsh wlan set hostednetwork mode=allow ssid="SSID-HERE" key="WIFI-PASSWORD-HERE"
Linux: nmcli dev wifi connect SSID-HERE password WIFI-PASSWORD-HERE
from esploitv2.
Related Issues (20)
- Help me
- Is it possible to configure as AP that runs a script on any device that connectsd to it?
- Adding support for swedish.
- NodeMCU HOT 1
- Device will not reset HOT 1
- Using the device as a remote keyboard HOT 1
- Cactus WHYD board url
- "*** was not declared in this scope" when trying to export compiled binary
- ESP8266FtpServer.h: No such file or directory HOT 1
- Layout problem HOT 2
- [WHID Injector] Infinite payloads looping if the payload finish with "\n\n" in auto run mode
- Cred Harvester Settings
- Error Upload the sketch. HOT 1
- Error Upload the sketch. HOT 1
- No wireless network (SSID "Exploit") HOT 2
- Keyboard layout
- Platformio new flashing does not propose solution for alt keyboards
- Cactus WHID not working HOT 1
- Having trouble flashing the firmware to the ESP-12S chip
- Probleme with WHID injector bought on Amazon
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from esploitv2.