+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: USB Hacking ideas (/showthread.php?tid=5484924)
USB Hacking ideas - Larzsify - Dec 5, 2016
Hi guys,
What are potential USB Hack ideas?
I made a webbrowser password stealer and a network password stealer.
I want to do more with the concept of inserting a usb in a laptop and stealing/exploiting stuff :p.
It's a project for school btw. (yes we learn to hack at school Yeye)
* - Saney - Dec 5, 2016
Sorry man but I don't know if there's any way you can code some autorun program to make an autorun.. But I know that there is custom USB's that are made only to autorun stuff.
I believe one of them is this one https://hakshop.com/products/usb-rubber-ducky-deluxe
No other then custom usb can autorun now (at least on the newest os's)
Good luck man. Might as well just buy one of those usb's. But I haven't tried them..
The USB is coded to look like a keyboard for the computer, which windows has no protection against.
* - Տnow - Dec 5, 2016
A usb or a rubber ducky? Usbs are extremely limited but you could be able to plant a rat and from there do practically anything
* - iamnotactiveanymore - Dec 5, 2016
Buy a bad usb, you can sometimes change your usb to a bad usb, that way you can make autorun scripts.
* - Long Morrison - Dec 5, 2016
https://github.com/brandonlw/Psychson/wiki/Known-Supported-Devices
* - Larzsify - Dec 14, 2016
(Dec 5, 2016 10:32 AM)Long Morrison Wrote: https://github.com/brandonlw/Psychson/wiki/Known-Supported-Devices
So with this repo you can convert a supported device into a Rubber ducky?
* - Long Morrison - Dec 14, 2016
(Dec 14, 2016 01:35 AM)Larzsify Wrote: So with this repo you can convert a supported device into a Rubber ducky?
Dunno, I just used google.
* - Atomikx - Dec 14, 2016
(Dec 14, 2016 02:03 AM)Long Morrison Wrote: Dunno, I just used google.
Yes it can specifically the phison 2251-03 chip usb's,
if you are like me you have a shit tonne of usb's you can test with
"Flash drive information extractor" to see if they are compatible, i had one that was compatible,
its basically modifing its firmware to make it appear as an HID device,
you can then make it type stuff on the keyboard extremely fast,so you can do pretty much
anything. ex:(access your website,set up a proxy for a MIM attack,etc...)
* - /usr - Dec 14, 2016
(Dec 14, 2016 01:35 AM)Larzsify Wrote: So with this repo you can convert a supported device into a Rubber ducky?
The link the other user provided, shows the type of USB that can be flashed. Not all the USB can be modified, you need to find the correct chip, like the PS2251. Pay attention that some sellers may have different version of the same usb stick, so it changes! Also, is not always easy to inspect before buying if the chip is the correct one. Just make some research.
About the payload, I can highly recommand this website: https://ducktoolkit.com/payload/ You specify the OS, and then the payload you wanna run with your USB. Then it create a .bin file and you literally just have to copy on your bad usb. For macOS, there is no payloads but they are working on it.