Created by : Chris Taylor [Blue Cosmo]
- YouTube - https://www.youtube.com/c/CosmodiumCS
- Part 1 - https://www.youtube.com/watch?v=j0v0rJsWDdE
- Part 2 - https://youtu.be/ao32BS8fwaM
- Part 3 - https://youtu.be/5enuUn3fl5Y
in this part, we discussed what tools we will [probably] use for this project.
Here is the list:
- USB RubberDucky
- Shark Jack
- Bash Bunny
- USB A - Micro USB adapter
- USB A - USB C adapter
- USB C - USB A adapter
- Custom Malware Drive
- Parrot Security OS bootable drive
- TP Link - Wireless Network Adapter
- Micro SD Card adapter
- 64GB USB Drive
- 2200mAh Portable Charger
- USB C - USB A cord
- USB Ethernet Adapter Stickers
- Hak5 Information Cards
- KNIFE PEN!!!
- Screw Driver
- SIM Bit
- 0.8 Bit [I-PHONE]
- 1.2 Bit [MACBOOK]
- PZ0 Bit [WINDOWS]
in this part, we built a payload for exfiltrating wifi passwords from Windows 10 coputers
all code for this project is in the 'usbrd-wifi' directory
- we took 'inspiration' from a script developed by 'brain eater'
- in our modifications we:
- allowed twinduck functionality
- allowed for different file names for each computer we interact with
- this lets us 'backup' multiple wifi passwords from multiple computers without overwriting the file
- we then flashed the 'twinduck' firmware on to our USB RubberDucky
Links:
- Unmodefied Script - https://forums.hak5.org/topic/40442-help-with-wifi-password-grabber/
- DuckyFlasher - https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Flashing-ducky
- USB RubberDucky Tutorial - https://www.youtube.com/watch?v=o1RbXtx0r4U
in this part, we built a payload for exfiltrating saved
wifi passwords from the users computer
- we used a web browser password "recovery tool" in order to grab passwords saved by the browser
- the software is created by Nirsoft and can be downloaded here - 'https://www.nirsoft.net/utils/web_browser_password.html'
- we renamed the file[s] to "P" for a quicker payload
- we then built a 'payload.txt' to run our duckyscript file [ducky-script.txt]
- this duckyscript file will run our P.exe file, steal the creds, and save them to our loot directory
- BY DEFAULT, THE SCRIPT WILL ONLY WORK IN SWITCH ONE
- view "ducky-script.txt" on how to change this