Hak5 Key Croc - Revision history

BDietl at 17:13, 18 December 2024

2024-12-18T17:13:42Z

@@ Line 37: / Line 37: @@
 *Yellow – Disk Full
 *White – No Keyboard Detected
 ===Basic Commands===
@@ Line 73: / Line 97: @@
 Additional pentesting tools like Metasploit might be installed on the Key Croc. Installation requires an active WiFi connection (which can be configured in the config.txt) and can be done via SSH, Cloud C2, or serial connection.
 After installation, these tools can be found in the tools/ directory.
 ==Accessing Key Croc==
 The Key Croc can be accessed via its USB flash disk, using any device's file manager. This enables the user to configure the Key Croc, check its loot files and change its active payloads. If a WiFi network and password is entered into the Key Croc's configuration file and it is configured to connect to a Cloud C2 server, captured keystrokes may also be streamed to this server. The Cloud C2 server also offers the possibility for a user to send payloads remotely to the Key Croc. Another way to remotely access the Key Croc is per SSH connection, which also has to be configured in the config.txt first.
 Finally, having a serial console connection to the Key Croc enables the user to access its Linux shell.
@@ Line 86: / Line 110: @@
 </references>
-[[Category:Documentation]]
+[[Category:Pentesting]]

NKirnbauer: gendering

2024-09-12T17:06:30Z

gendering

← Older revision		Revision as of 17:06, 12 September 2024
Line 7:		Line 7:

	KeyCroc is Hak5's smart keylogger and a remote penetration testing tool. In May 2020 Key Croc was introduced by HAK5 founder Darren Kitchen. A hardware keylogger is a small electronic hardware device that records keyboard activity.		KeyCroc is Hak5's smart keylogger and a remote penetration testing tool. In May 2020 Key Croc was introduced by HAK5 founder Darren Kitchen. A hardware keylogger is a small electronic hardware device that records keyboard activity.
	The keylogger software saves the keystrokes to a file, which he can later ~~access~~ remotely over the internet via the cloud from HAK5.		The keylogger software saves the keystrokes to a file, which can later be accessed remotely over the internet via the cloud from HAK5.
	To use the keylogger, connect KeyCroc to your computer. Then connect the USB port of a standard PC compatible USB keyboard to the other end. Key Croc automatically clones the hardware identifiers of attached keyboards. Target USB plugs can emulate USB keyboards, memory, serial, and ethernet. The payload can be executed using commands written in Ducky Script 2.0. LED lights indicate the current status. Additionally, the device is WiFi enabled and SSH enabled and is priced at $119.99. The main drawback is that Key Croc can only be connected to external keyboards.		To use the keylogger, connect KeyCroc to your computer. Then connect the USB port of a standard PC compatible USB keyboard to the other end. Key Croc automatically clones the hardware identifiers of attached keyboards. Target USB plugs can emulate USB keyboards, memory, serial, and ethernet. The payload can be executed using commands written in Ducky Script 2.0. LED lights indicate the current status. Additionally, the device is WiFi enabled and SSH enabled and is priced at $119.99. The main drawback is that Key Croc can only be connected to external keyboards.
	The Key Croc contains a Quad Core ARM processor, 512 MB RAM, and an 8 GB SSD. It can be connected to the internet by entering a Wi-Fi name and password into its config file. The Key Croc has to be connected to the target device via USB. Once it is installed between a PC and its keyboard, it starts its booting process, indicated by the LED changing its color. After it has booted, the LED is turned off and the Key Croc is now in Attack Mode.		The Key Croc contains a Quad Core ARM processor, 512 MB RAM, and an 8 GB SSD. It can be connected to the internet by entering a Wi-Fi name and password into its config file. The Key Croc has to be connected to the target device via USB. Once it is installed between a PC and its keyboard, it starts its booting process, indicated by the LED changing its color. After it has booted, the LED is turned off and the Key Croc is now in Attack Mode.
Line 61:		Line 61:
	[[File:Payload_Work_KeyCroc.png]]		[[File:Payload_Work_KeyCroc.png]]

	This payload is used to keep the user working and prints "Continue working!" and logs the user out when ~~he tries~~ to access youtube. It accomplishes this by using the GUI key (Windows Key) to inject shortcuts and control the device.		This payload is used to keep the user working and prints "Continue working!" and logs the user out when they try to access youtube. It accomplishes this by using the GUI key (Windows Key) to inject shortcuts and control the device.

	[[File:Sudo-pass.png \| 400px]]		[[File:Sudo-pass.png \| 400px]]

NKirnbauer: misspelling

2024-09-12T17:05:03Z

misspelling

← Older revision		Revision as of 17:05, 12 September 2024
Line 67:		Line 67:
	This example shows how to get the password of a user on an Ubuntu machine.		This example shows how to get the password of a user on an Ubuntu machine.
	First you need to tell it to wait for the "sudo" string. If the user types "sudo", the victim's keystrokes are recorded. SAVEKEYS UNTIL, like MATCH, can be a simple string or a complex regular expression. As the name suggests, it saves the entered key until it matches.		First you need to tell it to wait for the "sudo" string. If the user types "sudo", the victim's keystrokes are recorded. SAVEKEYS UNTIL, like MATCH, can be a simple string or a complex regular expression. As the name suggests, it saves the entered key until it matches.
	This little regex basically says that the key will be saved until ENTER is pressed twice. First ~~his~~ ENTER key is known to be at the end of the sudo command. Then enter your password when prompted. So it checks passwords using all regular expressions (.*?) until the last statement is the final ENTER key.		This little regex basically says that the key will be saved until ENTER is pressed twice. First the ENTER key is known to be at the end of the sudo command. Then enter your password when prompted. So it checks passwords using all regular expressions (.*?) until the last statement is the final ENTER key.
	In this case, the WAIT_FOR_LOOT command tells the payload to wait until the specified loot file is written. Use this awk -F to create a new file containing only the extracted password and send it to Cloud C2 with a notification.		In this case, the WAIT_FOR_LOOT command tells the payload to wait until the specified loot file is written. Use this awk -F to create a new file containing only the extracted password and send it to Cloud C2 with a notification.

JBreuss: /* References */

2024-01-06T09:59:30Z

References

← Older revision		Revision as of 09:59, 6 January 2024
Line 80:		Line 80:

	==References==		==References==
	[https://docs.hak5.org/~~hc/en~~-~~us/categories~~/~~360003797793-Key-Croc~~ Hak5 Key Croc Documentation]		[https://docs.hak5.org/key-croc/ Hak5 Key Croc Documentation]
	<references>		<references>
	<ref name="Pictures">https://hak5.org/products/key-croc</ref>		<ref name="Pictures">https://hak5.org/products/key-croc</ref>
	~~<ref name="Documentation">https://docs.hak5.org/key-croc/</ref>~~
	<ref name="Payload">https://github.com/hak5/keycroc-payloads/blob/master/payloads/examples/example_text-expander.txt</ref>		<ref name="Payload">https://github.com/hak5/keycroc-payloads/blob/master/payloads/examples/example_text-expander.txt</ref>
	</references>		</references>

	[[Category:Documentation]]		[[Category:Documentation]]

JBreuss: /* Key Croc Basics */

2024-01-06T09:59:00Z

Key Croc Basics

← Older revision		Revision as of 09:59, 6 January 2024
Line 7:		Line 7:

	KeyCroc is Hak5's smart keylogger and a remote penetration testing tool. In May 2020 Key Croc was introduced by HAK5 founder Darren Kitchen. A hardware keylogger is a small electronic hardware device that records keyboard activity.		KeyCroc is Hak5's smart keylogger and a remote penetration testing tool. In May 2020 Key Croc was introduced by HAK5 founder Darren Kitchen. A hardware keylogger is a small electronic hardware device that records keyboard activity.
	The keylogger software saves the keystrokes to a file, which he can later access remotely over the internet via the cloud from HAK5. ~~<ref name="Documentation></ref>~~		The keylogger software saves the keystrokes to a file, which he can later access remotely over the internet via the cloud from HAK5.
	To use the keylogger, connect KeyCroc to your computer. Then connect the USB port of a standard PC compatible USB keyboard to the other end. Key Croc automatically clones the hardware identifiers of attached keyboards. Target USB plugs can emulate USB keyboards, memory, serial, and ethernet. The payload can be executed using commands written in Ducky Script 2.0. LED lights indicate the current status. Additionally, the device is WiFi enabled and SSH enabled and is priced at $119.99. The main drawback is that Key Croc can only be connected to external keyboards.		To use the keylogger, connect KeyCroc to your computer. Then connect the USB port of a standard PC compatible USB keyboard to the other end. Key Croc automatically clones the hardware identifiers of attached keyboards. Target USB plugs can emulate USB keyboards, memory, serial, and ethernet. The payload can be executed using commands written in Ducky Script 2.0. LED lights indicate the current status. Additionally, the device is WiFi enabled and SSH enabled and is priced at $119.99. The main drawback is that Key Croc can only be connected to external keyboards.
	The Key Croc contains a Quad Core ARM processor, 512 MB RAM, and an 8 GB SSD. It can be connected to the internet by entering a Wi-Fi name and password into its config file. The Key Croc has to be connected to the target device via USB. Once it is installed between a PC and its keyboard, it starts its booting process, indicated by the LED changing its color. After it has booted, the LED is turned off and the Key Croc is now in Attack Mode.		The Key Croc contains a Quad Core ARM processor, 512 MB RAM, and an 8 GB SSD. It can be connected to the internet by entering a Wi-Fi name and password into its config file. The Key Croc has to be connected to the target device via USB. Once it is installed between a PC and its keyboard, it starts its booting process, indicated by the LED changing its color. After it has booted, the LED is turned off and the Key Croc is now in Attack Mode.

JBreuss: /* Key Croc Basics */

2024-01-06T09:58:21Z

Key Croc Basics

← Older revision		Revision as of 09:58, 6 January 2024
Line 7:		Line 7:

	KeyCroc is Hak5's smart keylogger and a remote penetration testing tool. In May 2020 Key Croc was introduced by HAK5 founder Darren Kitchen. A hardware keylogger is a small electronic hardware device that records keyboard activity.		KeyCroc is Hak5's smart keylogger and a remote penetration testing tool. In May 2020 Key Croc was introduced by HAK5 founder Darren Kitchen. A hardware keylogger is a small electronic hardware device that records keyboard activity.
	The keylogger software saves the keystrokes to a file, which he can later access remotely over the internet via the cloud from HAK5. <ref name="Documentation><\ref>		The keylogger software saves the keystrokes to a file, which he can later access remotely over the internet via the cloud from HAK5. <ref name="Documentation></ref>
	To use the keylogger, connect KeyCroc to your computer. Then connect the USB port of a standard PC compatible USB keyboard to the other end. Key Croc automatically clones the hardware identifiers of attached keyboards. Target USB plugs can emulate USB keyboards, memory, serial, and ethernet. The payload can be executed using commands written in Ducky Script 2.0. LED lights indicate the current status. Additionally, the device is WiFi enabled and SSH enabled and is priced at $119.99. The main drawback is that Key Croc can only be connected to external keyboards.		To use the keylogger, connect KeyCroc to your computer. Then connect the USB port of a standard PC compatible USB keyboard to the other end. Key Croc automatically clones the hardware identifiers of attached keyboards. Target USB plugs can emulate USB keyboards, memory, serial, and ethernet. The payload can be executed using commands written in Ducky Script 2.0. LED lights indicate the current status. Additionally, the device is WiFi enabled and SSH enabled and is priced at $119.99. The main drawback is that Key Croc can only be connected to external keyboards.
	The Key Croc contains a Quad Core ARM processor, 512 MB RAM, and an 8 GB SSD. It can be connected to the internet by entering a Wi-Fi name and password into its config file. The Key Croc has to be connected to the target device via USB. Once it is installed between a PC and its keyboard, it starts its booting process, indicated by the LED changing its color. After it has booted, the LED is turned off and the Key Croc is now in Attack Mode.		The Key Croc contains a Quad Core ARM processor, 512 MB RAM, and an 8 GB SSD. It can be connected to the internet by entering a Wi-Fi name and password into its config file. The Key Croc has to be connected to the target device via USB. Once it is installed between a PC and its keyboard, it starts its booting process, indicated by the LED changing its color. After it has booted, the LED is turned off and the Key Croc is now in Attack Mode.

JBreuss: /* Key Croc Basics */

2024-01-06T09:58:02Z

Key Croc Basics

← Older revision		Revision as of 09:58, 6 January 2024
Line 7:		Line 7:

	KeyCroc is Hak5's smart keylogger and a remote penetration testing tool. In May 2020 Key Croc was introduced by HAK5 founder Darren Kitchen. A hardware keylogger is a small electronic hardware device that records keyboard activity.		KeyCroc is Hak5's smart keylogger and a remote penetration testing tool. In May 2020 Key Croc was introduced by HAK5 founder Darren Kitchen. A hardware keylogger is a small electronic hardware device that records keyboard activity.
	The keylogger software saves the keystrokes to a file, which he can later access remotely over the internet via the cloud from HAK5.		The keylogger software saves the keystrokes to a file, which he can later access remotely over the internet via the cloud from HAK5. <ref name="Documentation><\ref>
	To use the keylogger, connect KeyCroc to your computer. Then connect the USB port of a standard PC compatible USB keyboard to the other end. Key Croc automatically clones the hardware identifiers of attached keyboards. Target USB plugs can emulate USB keyboards, memory, serial, and ethernet. The payload can be executed using commands written in Ducky Script 2.0. LED lights indicate the current status. Additionally, the device is WiFi enabled and SSH enabled and is priced at $119.99. The main drawback is that Key Croc can only be connected to external keyboards.		To use the keylogger, connect KeyCroc to your computer. Then connect the USB port of a standard PC compatible USB keyboard to the other end. Key Croc automatically clones the hardware identifiers of attached keyboards. Target USB plugs can emulate USB keyboards, memory, serial, and ethernet. The payload can be executed using commands written in Ducky Script 2.0. LED lights indicate the current status. Additionally, the device is WiFi enabled and SSH enabled and is priced at $119.99. The main drawback is that Key Croc can only be connected to external keyboards.
	The Key Croc contains a Quad Core ARM processor, 512 MB RAM, and an 8 GB SSD. It can be connected to the internet by entering a Wi-Fi name and password into its config file. The Key Croc has to be connected to the target device via USB. Once it is installed between a PC and its keyboard, it starts its booting process, indicated by the LED changing its color. After it has booted, the LED is turned off and the Key Croc is now in Attack Mode.		The Key Croc contains a Quad Core ARM processor, 512 MB RAM, and an 8 GB SSD. It can be connected to the internet by entering a Wi-Fi name and password into its config file. The Key Croc has to be connected to the target device via USB. Once it is installed between a PC and its keyboard, it starts its booting process, indicated by the LED changing its color. After it has booted, the LED is turned off and the Key Croc is now in Attack Mode.

JBreuss: /* References */

2024-01-06T09:57:12Z

References

← Older revision		Revision as of 09:57, 6 January 2024
Line 83:		Line 83:
	<references>		<references>
	<ref name="Pictures">https://hak5.org/products/key-croc</ref>		<ref name="Pictures">https://hak5.org/products/key-croc</ref>
			<ref name="Documentation">https://docs.hak5.org/key-croc/</ref>
	<ref name="Payload">https://github.com/hak5/keycroc-payloads/blob/master/payloads/examples/example_text-expander.txt</ref>		<ref name="Payload">https://github.com/hak5/keycroc-payloads/blob/master/payloads/examples/example_text-expander.txt</ref>
	</references>		</references>

	[[Category:Documentation]]		[[Category:Documentation]]

JBreuss: /* Payloads */

2024-01-06T09:54:19Z

Payloads

← Older revision		Revision as of 09:54, 6 January 2024
Line 58:		Line 58:
	Most payloads activate on MATCH, meaning that if a certain string is typed, the payload will be triggered. The date and time of activation of a payload is logged in the associated log file in the loot/ folder. The language used in the payloads is Ducky Script 2.0, or QUACK.		Most payloads activate on MATCH, meaning that if a certain string is typed, the payload will be triggered. The date and time of activation of a payload is logged in the associated log file in the loot/ folder. The language used in the payloads is Ducky Script 2.0, or QUACK.
	Payloads can be written by the pentester themselves, or downloaded from the Hak5 GitHub repository.		Payloads can be written by the pentester themselves, or downloaded from the Hak5 GitHub repository.

			[[File:Payload_Work_KeyCroc.png]]

			This payload is used to keep the user working and prints "Continue working!" and logs the user out when he tries to access youtube. It accomplishes this by using the GUI key (Windows Key) to inject shortcuts and control the device.

	[[File:Sudo-pass.png \| 400px]]		[[File:Sudo-pass.png \| 400px]]

Silvie at 15:45, 3 March 2023

2023-03-03T15:45:30Z

← Older revision		Revision as of 15:45, 3 March 2023
Line 81:		Line 81:
	<ref name="Payload">https://github.com/hak5/keycroc-payloads/blob/master/payloads/examples/example_text-expander.txt</ref>		<ref name="Payload">https://github.com/hak5/keycroc-payloads/blob/master/payloads/examples/example_text-expander.txt</ref>
	</references>		</references>

			[[Category:Documentation]]