Published on: 2022-10-30 02:47:32
Categories: 28
Share:
Design your own USB Rubber Ducky Ethical Hacking tool! Published by Udemy Academy. Use an inexpensive microcontroller and the Arduino IDE to write your human interface device payloads for penetration testing.
It’s easy to install backdoors, extract documents, or grab credentials with an innocent-looking USB drive called the USB Rubber Ducky. An expert hacker with a few minutes, a photographic memory, and excellent typing accuracy can use a few well-crafted keystrokes to hack anything he has physical access to. However, the right hardware can do the same thing every time on demand without fail. This is where the Rubber Ducky and other Human Interface Devices (HID) come into play. They inject keystrokes at superhuman speeds, violating computers’ inherent trust in humans by masquerading as keyboards. In this class, we’ll learn more about what HID attacks are, how they work, the social engineering that can be involved in deploying them, and how to use them in your pen test interactions. Keyboards present themselves to computers as HID devices and are in turn automatically recognized and accepted. We program a microcontroller in Arduino to take advantage of this by acting as an HID device. We can then create our own scripts to run when the device is connected to the target computer. All this at a fraction of the cost of a better branded USB Rubber Ducky!
Students learn to use a low-cost Digispark to program their payloads for use in ethical hacking and penetration testing. We will be creating more advanced payloads, including trace payloads that run in the background, as well as Rickroll payloads that can be used with permission from friends and family to demonstrate how HID attacks work. In addition, students learn to automate almost anything on an unattended machine, which can be very useful when you need to run the same commands on a series of computers. This is how the original USB Rubber Ducky was invented. While working as a system admin, Hak5 founder Darren Kitchen got tired of typing the same commands to fix printers and network shares, over and over again, and the device evolved out of laziness. He programmed a development board to mimic typing for him – and so the keystroke injection attack was born.
Computer running MacOS, Linux, or Windows
Arduino IDE installed (free)
Digispark ATTiny85 USB Development Board (~$2 each)
Useful but not required: Basic knowledge of Arduino IDE & terminal commands
After Extract, watch with your favorite Player.
Subtitle: None
Quality: 720p
2.29 GB
Sharing is caring: