Key Stroke Injection - Revision history

NKirnbauer: gendering

2024-10-11T06:59:53Z

gendering

← Older revision		Revision as of 06:59, 11 October 2024
Line 54:		Line 54:
	A possible software solution is surprisingly [https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection Windows Defender ATP], an enterprise endpoint security platform.		A possible software solution is surprisingly [https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection Windows Defender ATP], an enterprise endpoint security platform.

	A open source solution would be [http://konukoii.com/blog/2016/10/26/duckhunting-stopping-automated-keystroke-injection-attacks/ Duckhunt]. This script rezognizes the average typing speed and blocks key strokes that are too fast. It even has a "Sneaky" mode to not let the attacker know~~, his~~ attack has been blocked.		A open source solution would be [http://konukoii.com/blog/2016/10/26/duckhunting-stopping-automated-keystroke-injection-attacks/ Duckhunt]. This script rezognizes the average typing speed and blocks key strokes that are too fast. It even has a "Sneaky" mode to not let the attacker know that their attack has been blocked.

	== References ==		== References ==

MReiss: /* Bash Bunny */

2021-02-09T22:20:02Z

Bash Bunny

← Older revision		Revision as of 22:20, 9 February 2021
Line 36:		Line 36:

	==== Bash Bunny ====		==== Bash Bunny ====
	Bash Bunny is something like Rubber Duckys big brother. Its more expensive but also offers more tools like nmap, responder, impacket and metasploit, additional to the known Ducky Script. It's a small Linux machine on a USB drive mimicking multiple trusted devices. A full description can be found [~~https://shop.hak5.org/products/bash-bunny here~~].		Bash Bunny is something like Rubber Duckys big brother. Its more expensive but also offers more tools like nmap, responder, impacket and metasploit, additional to the known Ducky Script. It's a small Linux machine on a USB drive mimicking multiple trusted devices. A full description can be found in the articel [[Hak5 Bash Bunny]].

	==== Standard Hardware ====		==== Standard Hardware ====

MReiss: /* Rubber Ducky */

2021-02-09T22:19:00Z

Rubber Ducky

← Older revision		Revision as of 22:19, 9 February 2021
Line 24:		Line 24:

	==== Rubber Ducky ====		==== Rubber Ducky ====
	A well known example is the USB Rubberducky. A detailed description is available in the Elvis Wiki: [[~~USB_Rubber_Ducky~~]].		A well known example is the USB Rubberducky. A detailed description is available in the Elvis Wiki: [[Hak5 Rubber Ducky]].
	[[File:KSI_pocketadmin.jpg\|thumb\|right\|150px\|Pocket Admin]]		[[File:KSI_pocketadmin.jpg\|thumb\|right\|150px\|Pocket Admin]]

MReiss: /* Tools */

2020-07-12T09:21:29Z

Tools

← Older revision		Revision as of 09:21, 12 July 2020
Line 20:		Line 20:

	== Tools ==		== Tools ==
			[[File:Usb-rubber-ducky.jpg\|thumb\|right\|150px\|Rubber Ducky]]
	There are a few different hardware tools, mostly disguised as simple USB falsh drives, also called BadUSB. They are in some sort programmable or loadable with a specific payload to execute.		There are a few different hardware tools, mostly disguised as simple USB falsh drives, also called BadUSB. They are in some sort programmable or loadable with a specific payload to execute.
	~~[[File:Usb-rubber-ducky.jpg\|thumb\|right\|150px\|Rubber Ducky]]~~

	==== Rubber Ducky ====		==== Rubber Ducky ====

MReiss: /* Tools */

2020-07-12T09:21:09Z

Tools

← Older revision		Revision as of 09:21, 12 July 2020
Line 21:		Line 21:
	== Tools ==		== Tools ==
	There are a few different hardware tools, mostly disguised as simple USB falsh drives, also called BadUSB. They are in some sort programmable or loadable with a specific payload to execute.		There are a few different hardware tools, mostly disguised as simple USB falsh drives, also called BadUSB. They are in some sort programmable or loadable with a specific payload to execute.
			[[File:Usb-rubber-ducky.jpg\|thumb\|right\|150px\|Rubber Ducky]]

	==== Rubber Ducky ====		==== Rubber Ducky ====
	A well known example is the USB Rubberducky. A detailed description is available in the Elvis Wiki: [[USB_Rubber_Ducky]].		A well known example is the USB Rubberducky. A detailed description is available in the Elvis Wiki: [[USB_Rubber_Ducky]].
	[[File:~~Usb-rubber-ducky~~.jpg\|thumb\|right\|150px\|~~Rubber Ducky~~]]		[[File:KSI_pocketadmin.jpg\|thumb\|right\|150px\|Pocket Admin]]

	==== Pocket Admin ====		==== Pocket Admin ====
	Pocket Admin is an open source variant of Rubber Ducky to build by yourself. It states that it's cheaper and that it has a extended functionality. The projects description and manual can be found [https://www.electronics-lab.com/project/pocketadmin-keystroke-injection-device/ here].		Pocket Admin is an open source variant of Rubber Ducky to build by yourself. It states that it's cheaper and that it has a extended functionality. The projects description and manual can be found [https://www.electronics-lab.com/project/pocketadmin-keystroke-injection-device/ here].
	[[File:~~KSI_pocketadmin~~.~~jpg~~\|thumb\|right\|150px\|~~Pocket Admin~~]]		[[File:Usbninja.png\|thumb\|right\|150px\|USB Ninja]]

	==== USB Ninja ====		==== USB Ninja ====
	USB Ninja is a more expensive variant of BadUSB. It features different modules lika a bluetooth expansion and can also be built into normal keyboards. An overview is available [https://usbninja.com/ here].		USB Ninja is a more expensive variant of BadUSB. It features different modules lika a bluetooth expansion and can also be built into normal keyboards. An overview is available [https://usbninja.com/ here].
	[[File:~~Usbninja~~.png\|thumb\|right\|150px\|~~USB Ninja~~]]		[[File:Rubberbunny.png\|thumb\|right\|150px\|Bash Bunny]]

	==== Bash Bunny ====		==== Bash Bunny ====
	Bash Bunny is something like Rubber Duckys big brother. Its more expensive but also offers more tools like nmap, responder, impacket and metasploit, additional to the known Ducky Script. It's a small Linux machine on a USB drive mimicking multiple trusted devices. A full description can be found [https://shop.hak5.org/products/bash-bunny here].		Bash Bunny is something like Rubber Duckys big brother. Its more expensive but also offers more tools like nmap, responder, impacket and metasploit, additional to the known Ducky Script. It's a small Linux machine on a USB drive mimicking multiple trusted devices. A full description can be found [https://shop.hak5.org/products/bash-bunny here].
	~~[[File:Rubberbunny.png\|thumb\|right\|150px\|Bash Bunny]]~~

	==== Standard Hardware ====		==== Standard Hardware ====

MReiss: /* Tools */

2020-07-12T09:19:53Z

Tools

← Older revision		Revision as of 09:19, 12 July 2020
Line 28:		Line 28:
	==== Pocket Admin ====		==== Pocket Admin ====
	Pocket Admin is an open source variant of Rubber Ducky to build by yourself. It states that it's cheaper and that it has a extended functionality. The projects description and manual can be found [https://www.electronics-lab.com/project/pocketadmin-keystroke-injection-device/ here].		Pocket Admin is an open source variant of Rubber Ducky to build by yourself. It states that it's cheaper and that it has a extended functionality. The projects description and manual can be found [https://www.electronics-lab.com/project/pocketadmin-keystroke-injection-device/ here].
			[[File:KSI_pocketadmin.jpg\|thumb\|right\|150px\|Pocket Admin]]

	==== USB Ninja ====		==== USB Ninja ====

MReiss at 09:07, 12 July 2020

2020-07-12T09:07:33Z

← Older revision		Revision as of 09:07, 12 July 2020
Line 65:		Line 65:
	* https://usbguard.github.io/		* https://usbguard.github.io/
	* https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection		* https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection


			[[Category:Pentesting]]

MReiss: /* Tools */

2020-07-11T16:56:56Z

Tools

← Older revision		Revision as of 16:56, 11 July 2020
Line 35:		Line 35:
	==== Bash Bunny ====		==== Bash Bunny ====
	Bash Bunny is something like Rubber Duckys big brother. Its more expensive but also offers more tools like nmap, responder, impacket and metasploit, additional to the known Ducky Script. It's a small Linux machine on a USB drive mimicking multiple trusted devices. A full description can be found [https://shop.hak5.org/products/bash-bunny here].		Bash Bunny is something like Rubber Duckys big brother. Its more expensive but also offers more tools like nmap, responder, impacket and metasploit, additional to the known Ducky Script. It's a small Linux machine on a USB drive mimicking multiple trusted devices. A full description can be found [https://shop.hak5.org/products/bash-bunny here].
			[[File:Rubberbunny.png\|thumb\|right\|150px\|Bash Bunny]]

	==== Standard Hardware ====		==== Standard Hardware ====

MReiss: /* Tools */

2020-07-11T16:54:44Z

Tools

← Older revision		Revision as of 16:54, 11 July 2020
Line 31:		Line 31:
	==== USB Ninja ====		==== USB Ninja ====
	USB Ninja is a more expensive variant of BadUSB. It features different modules lika a bluetooth expansion and can also be built into normal keyboards. An overview is available [https://usbninja.com/ here].		USB Ninja is a more expensive variant of BadUSB. It features different modules lika a bluetooth expansion and can also be built into normal keyboards. An overview is available [https://usbninja.com/ here].
	[[File:Usbninja.png]]		[[File:Usbninja.png\|thumb\|right\|150px\|USB Ninja]]

	==== Bash Bunny ====		==== Bash Bunny ====

MReiss: /* USB Ninja */

2020-07-11T16:54:22Z

USB Ninja

← Older revision		Revision as of 16:54, 11 July 2020
Line 31:		Line 31:
	==== USB Ninja ====		==== USB Ninja ====
	USB Ninja is a more expensive variant of BadUSB. It features different modules lika a bluetooth expansion and can also be built into normal keyboards. An overview is available [https://usbninja.com/ here].		USB Ninja is a more expensive variant of BadUSB. It features different modules lika a bluetooth expansion and can also be built into normal keyboards. An overview is available [https://usbninja.com/ here].
			[[File:Usbninja.png]]

	==== Bash Bunny ====		==== Bash Bunny ====