Key Croc - Revision history

BDietl: /* Step 1 */

2024-12-18T17:41:23Z

Step 1

← Older revision		Revision as of 17:41, 18 December 2024
Line 36:		Line 36:
	In this payload "MATCH sudo" is used to activate the payload as soon as the user types the word "sudo" on the connected keyboard. "SAVEKEYS" is used to capture the keystrokes after the MATCH trigger. The captured keystrokes are saved in the file located at /root/loot/passwords.txt.		In this payload "MATCH sudo" is used to activate the payload as soon as the user types the word "sudo" on the connected keyboard. "SAVEKEYS" is used to capture the keystrokes after the MATCH trigger. The captured keystrokes are saved in the file located at /root/loot/passwords.txt.
	The logging process is stopped after the ENTER key is pressed.		The logging process is stopped after the ENTER key is pressed.


	3. Unmount the device		3. Unmount the device

BDietl: /* Step 1 */

2024-12-18T17:41:09Z

Step 1

← Older revision		Revision as of 17:41, 18 December 2024
Line 29:		Line 29:

	2. Add a payload file in the payloads directory, e.g.:		2. Add a payload file in the payloads directory, e.g.:

	MATCH sudo		MATCH sudo

	SAVEKEYS /root/loot/passwords.txt UNTIL [ENTER]		SAVEKEYS /root/loot/passwords.txt UNTIL [ENTER]

			In this payload "MATCH sudo" is used to activate the payload as soon as the user types the word "sudo" on the connected keyboard. "SAVEKEYS" is used to capture the keystrokes after the MATCH trigger. The captured keystrokes are saved in the file located at /root/loot/passwords.txt.
			The logging process is stopped after the ENTER key is pressed.


	3. Unmount the device		3. Unmount the device

BDietl: /* Requirements */

2024-12-18T17:28:49Z

Requirements

← Older revision		Revision as of 17:28, 18 December 2024
Line 7:		Line 7:
	* Operating system: Linux (Ubuntu 18.04 or newer), Windows, or MacOS		* Operating system: Linux (Ubuntu 18.04 or newer), Windows, or MacOS
	* Packages: git, nano (or another text editor)		* Packages: git, nano (or another text editor)
			* Additional Hardware: Wired keyboard
	* Optional: A configured Cloud C2 server for advanced functionality		* Optional: A configured Cloud C2 server for advanced functionality

BDietl: /* Description */

2024-12-18T17:26:26Z

Description

← Older revision		Revision as of 17:26, 18 December 2024
Line 22:		Line 22:

	5. Safely eject, unplug, and replug the Key Croc to complete the firmware update.		5. Safely eject, unplug, and replug the Key Croc to complete the firmware update.


	=== Step 1 ===		=== Step 1 ===
Line 33:		Line 32:

	3. Unmount the device		3. Unmount the device


	=== Step 2 ===		=== Step 2 ===
Line 40:		Line 38:

	2. Wait for user input.		2. Wait for user input.


	=== Step 3 ===		=== Step 3 ===

BDietl: /* Description */

2024-12-18T17:26:13Z

Description

← Older revision		Revision as of 17:26, 18 December 2024
Line 11:		Line 11:
	== Description ==		== Description ==

	=== ~~Step 1~~ ===		=== Preparation ===

	1. Download the latest firmware from https://downloads.hak5.org.		1. Download the latest firmware from https://downloads.hak5.org.
Line 23:		Line 23:
	5. Safely eject, unplug, and replug the Key Croc to complete the firmware update.		5. Safely eject, unplug, and replug the Key Croc to complete the firmware update.

	=== Step 2 ===
			=== Step 1 ===

	1. Mount the Key Croc's udisk on your computer.		1. Mount the Key Croc's udisk on your computer.
Line 31:		Line 32:
	SAVEKEYS /root/loot/passwords.txt UNTIL [ENTER]		SAVEKEYS /root/loot/passwords.txt UNTIL [ENTER]

	3. Unmount and ~~reboot~~ for ~~activation~~.		3. Unmount the device


			=== Step 2 ===

			1. Plug device in between the targeted computer and it's keyboard.

			2. Wait for user input.


	=== Step 3 ===		=== Step 3 ===

BDietl: /* Summary */

2024-12-18T17:22:49Z

Summary

← Older revision		Revision as of 17:22, 18 December 2024
Line 1:		Line 1:
	== Summary ==		== Summary ==

	The Key Croc is a hardware keylogger capable of logging keystrokes, executing payloads, and emulating USB devices.		The Key Croc is a hardware keylogger by Hak5, which is capable of logging keystrokes, executing payloads, and emulating USB devices.

	== Requirements ==		== Requirements ==

BDietl: /* References */

2024-12-18T16:58:02Z

References

← Older revision		Revision as of 16:58, 18 December 2024
Line 51:		Line 51:
	* https://docs.hak5.org/keycroc		* https://docs.hak5.org/keycroc

	[[Category:~~Basics~~]]		[[Category:Documentation]]

BDietl: /* References */

2024-12-18T16:42:10Z

References

← Older revision		Revision as of 16:42, 18 December 2024
Line 51:		Line 51:
	* https://docs.hak5.org/keycroc		* https://docs.hak5.org/keycroc

	[[Category:~~Documentation~~]]		[[Category:Basics]]

BDietl: Created page with "== Summary == The Key Croc is a hardware keylogger capable of logging keystrokes, executing payloads, and emulating USB devices. == Requirements == * Operating system: Linux (Ubuntu 18.04 or newer), Windows, or MacOS * Packages: git, nano (or another text editor) * Optional: A configured Cloud C2 server for advanced functionality == Description == === Step 1 === 1. Download the latest firmware from https://downloads.hak5.org. 2. Verify the checksum using SHA256...."

2024-12-15T22:42:20Z

Created page with "== Summary == The Key Croc is a hardware keylogger capable of logging keystrokes, executing payloads, and emulating USB devices. == Requirements == * Operating system: Linux (Ubuntu 18.04 or newer), Windows, or MacOS * Packages: git, nano (or another text editor) * Optional: A configured Cloud C2 server for advanced functionality == Description == === Step 1 === 1. Download the latest firmware from https://downloads.hak5.org. 2. Verify the checksum using SHA256...."

New page

== Summary ==

The Key Croc is a hardware keylogger capable of logging keystrokes, executing payloads, and emulating USB devices.

== Requirements ==

* Operating system: Linux (Ubuntu 18.04 or newer), Windows, or MacOS
* Packages: git, nano (or another text editor)
* Optional: A configured Cloud C2 server for advanced functionality

== Description ==

=== Step 1 ===

1. Download the latest firmware from https://downloads.hak5.org.

2. Verify the checksum using SHA256.

3. Plug in the Key Croc and press the arming button after 30 seconds.

4. Copy the .tar.gz firmware file to the Key Croc's root directory.

5. Safely eject, unplug, and replug the Key Croc to complete the firmware update.

=== Step 2 ===

1. Mount the Key Croc's udisk on your computer.

2. Add a payload file in the payloads directory, e.g.:
MATCH sudo
SAVEKEYS /root/loot/passwords.txt UNTIL [ENTER]

3. Unmount and reboot for activation.

=== Step 3 ===

1. Switch to Arming Mode and synchronize loot files:
mount /root/udisk
cp /root/loot/*.log /your/local/directory

2. Review logs:
croc_raw.log for raw key codes
croc_char.log for human-readable keystrokes

== Used Hardware ==

* Key Croc Keylogger by Hak5

== References ==

* https://docs.hak5.org/keycroc

[[Category:Documentation]]