USB Ninja: Setup - Revision history

NKirnbauer: NKirnbauer moved page USB Ninja to USB Ninja: Setup

2024-10-18T11:28:18Z

NKirnbauer moved page USB Ninja to USB Ninja: Setup

← Older revision	Revision as of 11:28, 18 October 2024
(No difference)

NKirnbauer: expired links changed with links from wayback machine

2024-10-03T09:45:11Z

expired links changed with links from wayback machine

← Older revision		Revision as of 09:45, 3 October 2024
Line 18:		Line 18:
	=== Step 2: Installing the required drivers ===		=== Step 2: Installing the required drivers ===

	To download the required drivers to recognize the device for setup, please click [https://usbninja.com/drivers_tools/USBninja_BOOT_driver.zip here].		To download the required drivers to recognize the device for setup, please click [http://web.archive.org/web/20230224111811/https://usbninja.com/drivers_tools/USBninja_BOOT_driver.zip here].

	=== Step 3: Arduino Setup ===		=== Step 3: Arduino Setup ===
Line 27:		Line 27:

	In the text field '''Additional Boards Manager URLs''' you should add the following URL		In the text field '''Additional Boards Manager URLs''' you should add the following URL
	http://usbninja.com/arduino/package_USBNinja_index.json		http://web.archive.org/web/20230224111811/http://usbninja.com/arduino/package_USBNinja_index.json
	With this URL the USB Ninja boards will be able to be installed by the IDE. To actually install the USB Ninja board package, go under '''Tools''' then select '''Board''' and then '''Board Manager'''. There select '''Contributed''' in the drop down selection. Select the USB Ninja package and install it. After the installation is successful, select the USB Ninja board after selecting '''Tools''' in the '''Board''' selection. Be sure to select the board named '''USB Ninja cable (BLE+Hall sensor)'''. This concludes the setup and one can now start scripting.		With this URL the USB Ninja boards will be able to be installed by the IDE. To actually install the USB Ninja board package, go under '''Tools''' then select '''Board''' and then '''Board Manager'''. There select '''Contributed''' in the drop down selection. Select the USB Ninja package and install it. After the installation is successful, select the USB Ninja board after selecting '''Tools''' in the '''Board''' selection. Be sure to select the board named '''USB Ninja cable (BLE+Hall sensor)'''. This concludes the setup and one can now start scripting.

Line 58:		Line 58:
	== Using the Android Application ==		== Using the Android Application ==

	The Android App can be downloaded [https://usbninja.com/drivers_tools/USBNinja.apk here], keep in mind this is a .apk file so some phones will not accept them unless your phone is set to developer mode. After installation start up the app. You need to have bluetooth and location activated to be able to connect/find the cable. Connect with the cable and input password. Now pressing the buttons on the screen is the same as using the remote. There are some benefits compared to the remote in my opinion though. First using a phone is more covert and comfortable. Secondly you can have 9 payloads on the app where as the two remotes can have either 2 or 8 payloads. Lastly, you can edit the buttons directly on the app if you wish to do so. ''Please note'' that this the code there is written in hexadecimal.		The Android App can be downloaded [http://web.archive.org/web/20240712203759/https://usbninja.com/drivers_tools/USBNinja.apk here], keep in mind this is a .apk file so some phones will not accept them unless your phone is set to developer mode. After installation start up the app. You need to have bluetooth and location activated to be able to connect/find the cable. Connect with the cable and input password. Now pressing the buttons on the screen is the same as using the remote. There are some benefits compared to the remote in my opinion though. First using a phone is more covert and comfortable. Secondly you can have 9 payloads on the app where as the two remotes can have either 2 or 8 payloads. Lastly, you can edit the buttons directly on the app if you wish to do so. ''Please note'' that this the code there is written in hexadecimal.

	== References ==		== References ==

AHollaus: re-added documentation tag

2021-01-26T17:09:57Z

re-added documentation tag

← Older revision		Revision as of 17:09, 26 January 2021
Line 62:		Line 62:
	== References ==		== References ==
	<references />		<references />

			[[Category:Documentation]]

AHollaus at 18:06, 19 December 2020

2020-12-19T18:06:32Z

← Older revision		Revision as of 18:06, 19 December 2020
Line 6:		Line 6:
	== How-To Basic ==		== How-To Basic ==

	The following requirements are valid for ''both'' versions, USB Ninja and USB Ninja Pro. It is highly recommended to first go through the getting started documentation offered on the official website. This document assumes that the reader is already familiar with scripting languages as a concept.<ref> Getting Started with USB Ninja. https://usbninja.com/help/</ref> Also this wikipage depends on the setup of the USB Ninja being done on an Windows OS, installation could be different on another OS.		The following requirements are valid for ''both'' versions, USB Ninja and USB Ninja Pro. It is highly recommended to first go through the getting started documentation offered on the official website. This document assumes that the reader is already familiar with scripting languages as a concept.<ref> Getting Started with USB Ninja. https://usbninja.com/help/</ref> Also this wikipage depends on the setup of the USB Ninja being done on a Windows OS, installation could be different on another OS.

	=== Step 0: Assembling the remote ===		=== Step 0: Assembling the remote ===
Line 32:		Line 32:
	=== Step 4: Configuring and uploading ===		=== Step 4: Configuring and uploading ===

	In terms of setup we are basically done, but ~~connection~~ is missing. For us to actually load scripts/payloads on the USB Ninja and be able to insert it somewhere to execute them, we need to execute a few extra steps. Through the package we selected in the above step, we gain access to some examples that include some configurations that are useful.		In terms of setup we are basically done, but connectivity is missing. For us to actually load scripts/payloads on the USB Ninja and be able to insert it somewhere to execute them, we need to execute a few extra steps. Through the package we selected in the above step, we gain access to some examples that include some configurations that are useful.

	==== Bluetooth Name and Password ====		==== Bluetooth Name and Password ====

	The default Bluetooth device name is "Ninja" and the default bluetooth password is "8888". To change ~~this~~ values go under '''File''', '''Example''', '''NinjaBLESetup''' and then select '''NinjaBLESetup'''. This opens the setup code for the BLE (Bluetooth Low Energy) module. Find the following line:		The default Bluetooth device name is "Ninja" and the default bluetooth password is "8888". To change these values go under '''File''', '''Example''', '''NinjaBLESetup''' and then select '''NinjaBLESetup'''. This opens the setup code for the BLE (Bluetooth Low Energy) module. Find the following line:
	SetBLE("Ninja", "8888");		SetBLE("Ninja", "8888");
	There you can change the values as you want. Note that the name is how it appears on your PC when connecting with it and how it appears when pairing with it via Android phone. If you haven't changed these settings or you are not using a remote skip the below section and go to the uploading section.		There you can change the values as you want. Note that the name is how it appears on your PC when connecting with it and also how it appears when pairing with it via Android phone. If you haven't changed these settings or you are not using a remote, skip the below section and go to the uploading section.

	==== Bluetooth Name and Password Remote Edition ====		==== Bluetooth Name and Password Remote Edition ====
Line 47:		Line 47:
	==== Uploading ====		==== Uploading ====

	Whatever changes you do that ~~applies~~ to the Ninja cable need to be uploaded, the '''NinjaBLESetup''' included. For that you simply have to click the '''Verify''' button followed by the '''Upload''' button in the IDE. After pressing it you will have about ''1 minute'' to do the following: While pluging in the USB Ninja Cable hold the magnetic ring, which is included in the package, ''against the plastic shell surrounding the USB section you insert in''. If this does not happen or this happens ''after'' plugging in the device will not activate the DFU mode. The DFU mode stands for Device Firmware Upgrade mode, it can regarded as a programming. Only when this mode is active can one write and upload on the firmware of the USB Ninja.		Whatever changes you do that apply to the Ninja cable need to be uploaded, the '''NinjaBLESetup''' included. For that you simply have to click the '''Verify''' button followed by the '''Upload''' button in the IDE. After pressing it you will have about ''1 minute'' to do the following: While pluging in the USB Ninja Cable hold the magnetic ring, which is included in the package, ''against the plastic shell surrounding the USB section you insert in''. If this does not happen or this happens ''after'' plugging in the device will not activate the DFU mode. The DFU mode stands for Device Firmware Upgrade mode, it can regarded as a programming. Only when this mode is active can one write and upload on the firmware of the USB Ninja.

	==== Execute ====		==== Execute ====

	Now you should be ready and able to upload scripts on this device. For execution you have multiple variations. You could let the payloads (A and/or B) execute at arbitrary times or when something specific happens. You could also trigger them with the remote, just turn it on and it will connect automatically with the cable connected to the target device. Then just press payload A and/or B, it will then execute the script asociated with the corresponding payload. Another option is using the application, which I will mention below. Just play around, I would recommend using the example keystroke injection code, it can be found under '''File''', '''Examples''', '''NinjaKeyboard''' and then '''BLERemoteKeyboard'''. This example payload injects keyboard strokes on the target device, a lot can be done with this. Don't forget to ~~ajust~~ the define line to your keyboard layout, for example like this:		Now you should be ready and able to upload scripts on this device. For execution you have multiple variations. You could let the payloads (A and/or B) execute at arbitrary times or when something specific happens. You could also trigger them with the remote, just turn it on and it will connect automatically with the cable connected to the target device. Then just press payload A and/or B, it will then execute the script asociated with the corresponding payload. Another option is using the application, which I will mention below. Just play around, I would recommend using the example keystroke injection code, it can be found under '''File''', '''Examples''', '''NinjaKeyboard''' and then '''BLERemoteKeyboard'''. This example payload injects keyboard strokes on the target device, a lot can be done with this. Don't forget to adjust the define line to your keyboard layout, for example like this:
	#define LAYOUT_GERMAN		#define LAYOUT_GERMAN

AHollaus at 18:01, 19 December 2020

2020-12-19T18:01:57Z

← Older revision		Revision as of 18:01, 19 December 2020
Line 1:		Line 1:
	== Summary ==		== Summary ==

	The USB Ninja is a USB cable that has the capability to infect connected devices with malware through the injection of keystrokes or mouse movement. It does so by exploiting the capability of writing/changing the ~~firware~~ on the USB. Since the firmware isn't fully checked by operating systems, it is easy to insert malicious payloads on it which can be triggered automatically or remotely on the ~~target's~~ device. This device can also be used for data transfer and charging, just like any other USB cable. One of the ~~founder~~ of USB Ninja, Kevin Mitnick, defines the USB Ninja as the "spiritual successor" of BadUSB.<ref> Wikipage of Kevin Mitnick. https://wikipedia.org/wiki/Kevin_Mitnick</ref><ref> BadUSB Overview including presentation slides and video link. https://adsecurity.org/?p=362</ref>		The USB Ninja is a USB cable that has the capability to infect connected devices with malware through the injection of keystrokes or mouse movement. It does so by exploiting the capability of writing/changing the firmware on the USB. Since the firmware isn't fully checked by operating systems, it is easy to insert malicious payloads on it which can be triggered automatically or remotely on the targets device. This device can also be used for data transfer and charging, just like any other USB cable. One of the founders of USB Ninja, Kevin Mitnick, defines the USB Ninja as the "spiritual successor" of BadUSB.<ref> Wikipage of Kevin Mitnick. https://wikipedia.org/wiki/Kevin_Mitnick</ref><ref> BadUSB Overview including presentation slides and video link. https://adsecurity.org/?p=362</ref>
	In this article USB Ninja and USB Ninja Pro will both be used synonymously since different sellers have different ways of differentiating them. Generally the USB Ninja Pro includes all the different cables and also a bluetooth remote, which differs depending which version has been obtained. [[USB Ninja Pro-kit with Remote control\|Here]] one can find the kit that was used whilst creating this article.		In this article USB Ninja and USB Ninja Pro will both be used synonymously since different sellers have different ways of differentiating them. Generally the USB Ninja Pro includes all the different cables and also a bluetooth remote, which differs depending which version has been obtained. [[USB Ninja Pro-kit with Remote control\|Here]] one can find the kit that was used whilst creating this article.

AHollaus at 17:45, 19 December 2020

2020-12-19T17:45:18Z

← Older revision		Revision as of 17:45, 19 December 2020
Line 59:		Line 59:

	The Android App can be downloaded [https://usbninja.com/drivers_tools/USBNinja.apk here], keep in mind this is a .apk file so some phones will not accept them unless your phone is set to developer mode. After installation start up the app. You need to have bluetooth and location activated to be able to connect/find the cable. Connect with the cable and input password. Now pressing the buttons on the screen is the same as using the remote. There are some benefits compared to the remote in my opinion though. First using a phone is more covert and comfortable. Secondly you can have 9 payloads on the app where as the two remotes can have either 2 or 8 payloads. Lastly, you can edit the buttons directly on the app if you wish to do so. ''Please note'' that this the code there is written in hexadecimal.		The Android App can be downloaded [https://usbninja.com/drivers_tools/USBNinja.apk here], keep in mind this is a .apk file so some phones will not accept them unless your phone is set to developer mode. After installation start up the app. You need to have bluetooth and location activated to be able to connect/find the cable. Connect with the cable and input password. Now pressing the buttons on the screen is the same as using the remote. There are some benefits compared to the remote in my opinion though. First using a phone is more covert and comfortable. Secondly you can have 9 payloads on the app where as the two remotes can have either 2 or 8 payloads. Lastly, you can edit the buttons directly on the app if you wish to do so. ''Please note'' that this the code there is written in hexadecimal.


	== References ==		== References ==
	<references />		<references />

AHollaus: using android application

2020-12-19T17:45:07Z

using android application

← Older revision		Revision as of 17:45, 19 December 2020
Line 58:		Line 58:
	== Using the Android Application ==		== Using the Android Application ==

			The Android App can be downloaded [https://usbninja.com/drivers_tools/USBNinja.apk here], keep in mind this is a .apk file so some phones will not accept them unless your phone is set to developer mode. After installation start up the app. You need to have bluetooth and location activated to be able to connect/find the cable. Connect with the cable and input password. Now pressing the buttons on the screen is the same as using the remote. There are some benefits compared to the remote in my opinion though. First using a phone is more covert and comfortable. Secondly you can have 9 payloads on the app where as the two remotes can have either 2 or 8 payloads. Lastly, you can edit the buttons directly on the app if you wish to do so. ''Please note'' that this the code there is written in hexadecimal.


	== References ==		== References ==
	<references />		<references />

AHollaus at 17:34, 19 December 2020

2020-12-19T17:34:44Z

← Older revision		Revision as of 17:34, 19 December 2020
Line 54:		Line 54:
	#define LAYOUT_GERMAN		#define LAYOUT_GERMAN

	With this in mind, you can now add whatever script you want and execute it through the help of the USBNinja, even Ducky Script payloads work. For more inspiration besides the examples given with the package, I would recommend going through GitHub. <ref> GitHub. https://github.com/</~~ref><~~ref>		With this in mind, you can now add whatever script you want and execute it through the help of the USBNinja, even Ducky Script payloads work. For more inspiration besides the examples given with the package, I would recommend going through GitHub. <ref> GitHub. https://github.com/</ref>

	== Using the Android Application ==		== Using the Android Application ==

AHollaus at 17:34, 19 December 2020

2020-12-19T17:34:23Z

← Older revision		Revision as of 17:34, 19 December 2020
Line 1:		Line 1:
	== Summary ==		== Summary ==

	The USB Ninja is a USB cable that has the capability to infect connected devices with malware through the injection of keystrokes. It does so by exploiting the capability of writing/changing the firware on the USB. Since the firmware isn't fully checked by operating systems, it is easy to insert malicious payloads on it which can be triggered automatically or remotely on the target's device. This device can also be used for data transfer and charging, just like any other USB cable. One of the founder of USB Ninja, Kevin Mitnick, defines the USB Ninja as the "spiritual successor" of BadUSB.<ref> Wikipage of Kevin Mitnick. https://wikipedia.org/wiki/Kevin_Mitnick</ref><ref> BadUSB Overview including presentation slides and video link. https://adsecurity.org/?p=362</ref>		The USB Ninja is a USB cable that has the capability to infect connected devices with malware through the injection of keystrokes or mouse movement. It does so by exploiting the capability of writing/changing the firware on the USB. Since the firmware isn't fully checked by operating systems, it is easy to insert malicious payloads on it which can be triggered automatically or remotely on the target's device. This device can also be used for data transfer and charging, just like any other USB cable. One of the founder of USB Ninja, Kevin Mitnick, defines the USB Ninja as the "spiritual successor" of BadUSB.<ref> Wikipage of Kevin Mitnick. https://wikipedia.org/wiki/Kevin_Mitnick</ref><ref> BadUSB Overview including presentation slides and video link. https://adsecurity.org/?p=362</ref>
	In this article USB Ninja and USB Ninja Pro will both be used synonymously since different sellers have different ways of differentiating them. Generally the USB Ninja Pro includes all the different cables and also a bluetooth remote, which differs depending which version has been obtained. [[USB Ninja Pro-kit with Remote control\|Here]] one can find the kit that was used whilst creating this article.		In this article USB Ninja and USB Ninja Pro will both be used synonymously since different sellers have different ways of differentiating them. Generally the USB Ninja Pro includes all the different cables and also a bluetooth remote, which differs depending which version has been obtained. [[USB Ninja Pro-kit with Remote control\|Here]] one can find the kit that was used whilst creating this article.

Line 54:		Line 54:
	#define LAYOUT_GERMAN		#define LAYOUT_GERMAN

	With this in mind, you can now add whatever script you want and execute it through the help of the USBNinja, even Ducky Script payloads work.		With this in mind, you can now add whatever script you want and execute it through the help of the USBNinja, even Ducky Script payloads work. For more inspiration besides the examples given with the package, I would recommend going through GitHub. <ref> GitHub. https://github.com/</ref><ref>

	== Using the Android Application ==		== Using the Android Application ==



	== References ==		== References ==
	<references />		<references />

AHollaus: added Execute

2020-12-19T17:16:35Z

added Execute

← Older revision		Revision as of 17:16, 19 December 2020
Line 51:		Line 51:
	==== Execute ====		==== Execute ====

	Now you should be ready and able to upload scripts on this device.		Now you should be ready and able to upload scripts on this device. For execution you have multiple variations. You could let the payloads (A and/or B) execute at arbitrary times or when something specific happens. You could also trigger them with the remote, just turn it on and it will connect automatically with the cable connected to the target device. Then just press payload A and/or B, it will then execute the script asociated with the corresponding payload. Another option is using the application, which I will mention below. Just play around, I would recommend using the example keystroke injection code, it can be found under '''File''', '''Examples''', '''NinjaKeyboard''' and then '''BLERemoteKeyboard'''. This example payload injects keyboard strokes on the target device, a lot can be done with this. Don't forget to ajust the define line to your keyboard layout, for example like this:
			#define LAYOUT_GERMAN

			With this in mind, you can now add whatever script you want and execute it through the help of the USBNinja, even Ducky Script payloads work.

	== Using the Android Application ==		== Using the Android Application ==
	== References ==		== References ==
	<references />		<references />