USB Hacks for Windows, Linux, and Macs

No video

USB Hacks for Windows, Linux, and Macs - Hak5 2124

Рет қаралды 83,120

Күн бұрын

Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:
____________________________________________
Building a unified cross platform USB Rubber Ducky hack payload for Windows, Linux, and Macs OSX.
-------------------------------
Shop: www.hakshop.com
Support: / threatwire
Subscribe: / hak5
Our Site: www.hak5.org
Contact Us: / hak5
Threat Wire RSS: shannonmorse.p...
Threat Wire iTunes: itunes.apple.c...
------------------------------
www.hackacrosst...
~-~~-~~~-~~-~
Please watch: "Bash Bunny Primer - Hak5 2225"
• Bash Bunny Primer - Ha...
~-~~-~~~-~~-~
____________________________________________
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community - where all hackers belong.

Пікірлер: 350

@shaunbester7119 3 жыл бұрын

10:56 The timing of the ad was perfect! I thought if was a troll by the hak5 team until I tried to slip forwards, turns out it was a actual ad

@LiveOverflow 7 жыл бұрын

Always funny when I hear hackers hate on mac users :P

@T4P4N 6 жыл бұрын

LiveOverflow :)

@victorcybersecurity2268 5 жыл бұрын

Haha

@Itouchlove 7 жыл бұрын

hak5 at this point how many duckys have you opened hahahaha.

@hak5 7 жыл бұрын

Too many!

@relik0fages 7 жыл бұрын

+Hak5 You should sign them and auction them off for charity.

@Stenstorp 7 жыл бұрын

Not enough!

@mrwhiteblack7986 7 жыл бұрын

Kleitos Aurelcath I don't understand what do you mean, because I'm a beginner, but it sounds funny and complex 😂👍🏻

@necolasroot9865 7 жыл бұрын

Kali for ever 🐉🖥

@benjamindoron7731 7 жыл бұрын

Kali's great and all, but I could never use it day to day. I only use it in a VM.

@hinach4n698 7 жыл бұрын

NeCoLaS Root arch Linux with blackarch surface

@turtle8712 7 жыл бұрын

oh please don't tell me you un-ironically use Kali...

@hinach4n698 7 жыл бұрын

Rob ert lol

@1998goodboy 7 жыл бұрын

A few weeks ago I was asked by my tutor to set up a raspberry pi for an open evening for college. Had a CAT5 cable, was bored and decided to tie a noose, it worked to beautifully!

@CusPedro 7 жыл бұрын

don't care what anyone says, you guys rock! I'm currently in college. one of my courses is network plus. the stuff you guys talk about has me wanting more.

@JoshuaPritt 7 жыл бұрын

Cat5 experience: was drilling through interior block wall wondering why the bit stopped going through. Found out I was hitting the metal conduit box for the mains power breaker box on the other side. It's a good thing the bit didn't make it through!

@robmitchell152 4 жыл бұрын

FYI if you have multiple input languages installed on a Windows box, Win+[space] switches the input language rather than ignoring.

@notapplicable2636 6 жыл бұрын

MX Linux running XFCE is an awesome and fast setup!

@isaacdallyn 7 жыл бұрын

debian because it's clearly the best distro

@Cygnus0lor 7 жыл бұрын

Come on! Ubuntu FTW!

@assymcgee7707 7 жыл бұрын

isaac dallyn In the words of our omnipotent leader "WRONG". Arch has the best package manager and the best repository diversity.

@mathijsdegouw2034 7 жыл бұрын

no manjaro FTW!!!

@deadsteezytv8552 7 жыл бұрын

no pure arch pls :3

@isaacdallyn 7 жыл бұрын

never tryed arch tbh. and im not a fan of ubuntu

@karter61 7 жыл бұрын

Another idea would be using a website like Grabify, as you can shorten the link (even to a google one) and it will give you more information like the IP, user agent (platform, browser, OS, device), host name, time and country. This could be more helpful for finding what specific device has opened the payload. Keep up the great work Hak5 team!

@bana2s 7 жыл бұрын

Geeze, I'm old. I've used SunOS, Solaris, 4.2 and 4.3 BSD, 386BSD, FreeBSD, NetBSD, OpenBSD, MacOS, Windows (from 3.0 though to today, with a small detour onto 1.0), Ubuntu, Debian, Minix, Plan 9, plus some mainframe crap no one cares about. And that's just the ones I remember offhand.

@RodrigoGraca31 7 жыл бұрын

My favorite Linux Distro: Linux Mint. Why? Simple, beautiful, always up to date, "windows look-alike" ...

@JohnSmith-vi6wu 4 жыл бұрын

debian for me.... parrot os for pentesting

@FishKungfu 7 жыл бұрын

That was really great guys! Especially spoofing the Mac firmware.

@951376jonathan 7 жыл бұрын

win + space In my win 10 box, changes the input language. no more no less.

@OGH3294 7 жыл бұрын

same here

@PJDuffield 7 жыл бұрын

not on my xps 13

@1988Caine 7 жыл бұрын

same here

@aaronlennox6025 6 жыл бұрын

yep, on mine it switches to dvorak. might cause issues./

@nylarnameless1759 4 жыл бұрын

backbox 6 -- put together my first hackentosh --great system no complaints here

@juweinert 7 жыл бұрын

15:50 awesome bash tip number two: ctrl-r again gets you to the next matching history item.

@elvinmucaj9664 7 жыл бұрын

Hi there, what kind of linux system do you use and where I can find those tools you use in here in your program. thank you

@mikepence763 7 жыл бұрын

I just noticed that I wasn't subscribed to this channel. Fixed that problem :-)

@mrmiggiman 7 жыл бұрын

Only one problem, if you have multiple languages on windows, the windows + space command will switch between the languages. Its not gonna ruin the script, but it will still change the language, and the user would probably notice that.

@definesigint2823 5 жыл бұрын

Another gotcha with unknown drives: I once saw a horde of unattended drives laid out as PR swag that turned out to be the "fun" kind that misrepresents capacity (possibly 2GiB misreporting as 8's). The marketing materials were tiny so they probably never knew they were setting up their prospects for surprise data loss.

@JahMusicTube 7 жыл бұрын

Alt(Option)+F2 opens the display settings on Macbook retina 2015 (Sierra). Not preventing the payload to be executed, but still not totally clean. I guess there are plenty of alternatives for Alt+F2 for Linux though. Anyway, great video guys. Very well done :D

@thegai8989 7 жыл бұрын

Do this with a Usb-C and leave it in starbucks at 11 am.

@solidsn2011 7 жыл бұрын

What if someone has chromebook and chromeos? I would love to see if this works in these machines as well!

@hitch4526 4 жыл бұрын

Maybe for the Mac, add in a CMD+w, to force the keyboard assistant closes, if this Rubber ducky is pretending to be a keyboard. If it gets command line access, I'm pretty sure that OSX still implements the "open" command. It will also respond to URLs.

@null3577 6 жыл бұрын

win + space: changes keyboard layout if available

@DigitalMetal 7 жыл бұрын

Great segment and I like your solution. Alt+F2 is pretty standard on most Linux desktop environments for opening a run box, but not all open up urls. For example, Cinnamon does not open urls from it's run box, although Alt+F2 does open the box. I wonder if there is a way to incorporate "xdg-open" into the command without messing up the other two OSes.

@krismapes2537 7 жыл бұрын

win + space will change the input language on win if the user has a second language setup

@TheT31337 7 жыл бұрын

arch linux ftw (YAY AUR)

@pwnage2600 7 жыл бұрын

No dates for hack across the planet. Looking forward to meeting you both in Queensland, Australia (hopefully).

@joeltyler3427 7 жыл бұрын

Shawn P No dates been finalized yet.

@philipm1896 7 жыл бұрын

Cat5e :( will always break behind rj45 wall sockets on a friday somewhere and unlabelled cat5e cables in the main com room in bunches of 50 are always fun. awesome info too ,thanks

@hitch4526 4 жыл бұрын

OSX was my beginnings in LINUX. Now it's a little easier to see why LINUX is, due to the UNIX aspect.

@robofan3226 7 жыл бұрын

Just got my rubber ducky, thanks for uploading LOL

@sarcasm3669 7 жыл бұрын

Robofån wish i had one too, supercool stuff up here

@lolollilol2655 7 жыл бұрын

Sar Casm you can get something similar to a rubber duck for 3 dollars

@sarcasm3669 7 жыл бұрын

Lolol Lilol not really similar, because it has no mass storage as far as i know

@benjamindoron7731 7 жыл бұрын

I'm very excited to hear that you are coming to Australia, but the page on your website does not list Australia as a location.

@RicardoPenders 4 жыл бұрын

My favorite Linux distribution is Raspbian Stretch on my Raspberry Pi 3B+ Because of the Raspberry Pi I finally started using Linux for the first time, strange thing is that I started coding 24 years ago and never had any practical usage for Linux... I did try Suse Linux once just to get somewhat familiar with it but at the time it wasn't for me until I got the Raspberry Pi. So now I do like Linux because its simplicity with programming in Python which I started to love but I wouldn't have a Linux machine as my main computer, I'm really a hardcore desktop gamer on the Windows platform kinda guy and I don't think that I would change that any time soon. Best regards, Ricardo Penders

@rivet92 7 жыл бұрын

Arch with i3wm all the way, maybe some Plasma 5 if i feel tired of so much tiling

@mjawhitener 7 жыл бұрын

I can confirm that alt+F2 will work in KDE plasma 5 with default keybinding and default search plugins.

@archer.5354 7 жыл бұрын

How do you win a Pineapple?!?! I'd love to get my hands on one!

@SteveRobersonTv 7 жыл бұрын

Hey guys I'm a new viewer fan of the show. Got a off topic question, how are you switching camera sources with those little red and white buttons on the desk. Great show low tech question

@KillerSpud 7 жыл бұрын

I don't have much of a relationship with Cat5, but me and Cat6 go WAY back. Mile upon mile of way back.

@KTibow 4 жыл бұрын

On Windows, the Mac Spotlight Search shortcut changes your language. I got around that by pressing 3 times.

@pberson 7 жыл бұрын

I just duplicated some of your code with Adafruit Circuit Playground Device which is just an Arduino board and can act like a HID. Now when people are looking at my pretty neopixels, I really could be installing a payload on their systems :) (Joking of course)

@nikovav2229 7 жыл бұрын

So... what Linux OS should I be running then?

@ask_carbon 7 жыл бұрын

Those Xps laptops look so damm sexy(And hear I sit using a 4 year old fat dell )

@deadsteezytv8552 7 жыл бұрын

i used to have a g6 running arch :P

@mrharryweston 6 жыл бұрын

I am wondering when you plug in a USB is there any key combination you can use to also stop the payload from running.

@tylorbray 7 жыл бұрын

So I was looking at my rubber ducky and noticed that there are what look like seven female debug pins on the end and was wondering there use/purpose? Thanks

@lordbambithird8919 7 жыл бұрын

Question... voice attack for disabled hackers? could that be a thing?

@epicguitar1602 7 жыл бұрын

You guys over at Hak5 should make a Hak5-OS maybe just a VM iso, idk i just wanna see a hak5-OS

@c0deoustech 7 жыл бұрын

Make it!

@epicguitar1602 7 жыл бұрын

c0deous i wish, i only hack not an OS builder

@Coldking12345 7 жыл бұрын

I've actually started development on this

@richardvaughn2705 6 жыл бұрын

So basically KDE debian with metasploit installed?

@guneshshanbhag6208 6 жыл бұрын

U can create a custom ISO on Kali Linux website.... go ahead and create Ur own hak5OS

@corrupteddrive 3 жыл бұрын

I miss this format of videos

@DimusTech 7 жыл бұрын

So Darren, your hand actually touched my Rubber Ducky? o_O

@user-wz3pi1vh7o 6 жыл бұрын

What linux distribution are you using on the pc making the payloads?

@NateCrownwell 7 жыл бұрын

Don't know if this is even feasible but what if you could make the ducky run a certain payload based on the OS.

@CleverMods 7 жыл бұрын

Like you were talking about in the beginning of your video, you could just drop the USB and someone will find it and plug it in, but tell me why I would want to waste $45 just to through it on the ground and get one victim? You should try to make a cheaper type of USB Rubber Ducky for these types of things.

@dublades 7 жыл бұрын

Hi, I've noticed that if you have more than one "input method" in a windows 10 machine, if you press Win+Space then the Operating System switch the keyboard language and consequently the keyboard layout. This may be a problem if the payload contains special characters like %£&£"!\

@DigitalMetal 7 жыл бұрын

I'm not arguing on which distro is the best (different distros have their strengths and weaknesses), but I believe Ubuntu hasn't been in the #1 spot on Distrowatch for a while. I think it's been #3 for some time.

@d3aph 6 жыл бұрын

I use Mint as my distro of choice. Arch feels very intimidating for some reason. Also, did the findings of this pentest job get published somewhere online?

@guneshshanbhag6208 6 жыл бұрын

Hey Darren, can we change the VID AND PID of generic USB C adaptor for Mac ??

@antoniobanderas8620 5 жыл бұрын

thats a cross platform browser opener, but how about executing complex payloads ?

@thegai8989 7 жыл бұрын

Arch or Debian and Shannon is legit the best. Oh and KDE FTW

@randommathewsjunk 7 жыл бұрын

How would you be able to do this if the environment had Run disabled on windows via group policy?

@DarrenKitchen 7 жыл бұрын

If Run were disabled, I'd change the payload to type the URL into the start menu directly. I've never seen the entire start menu disabled. This would mean Windows 7+ for target environments as XP and before didn't support such a feature. GUI DELAY 100 STRING www.example.com ENTER

@jonathanvega9679 7 жыл бұрын

Great show guys! I'm currently enrolled in a cyber security and hacking course and I would like to know which laptop would you recommend for pentesting and malware development? I'm looking for something to run Kali on and something I can code on, I'm having a hard time finding a computer with good balance on performance and comfort (can't deal with bulky laptops).

@killistan 7 жыл бұрын

I am running XFCE on Gentoo :)

@Destide 7 жыл бұрын

I'm running Manjaro, no wait Antegos, no wait Mint, no wait Arch on KDE, no wait Mate, no wait i3, no wait XFCE, no wait RISC.

@killistan 7 жыл бұрын

Yeah, I've been a Gentoo user for a good minute but I still distro hop a little in so far as sometimes family members let me install Linux distros on their computers. No way am I using Gentoo for that ;)

@mfrmorais001 7 жыл бұрын

You could use CTRL + T to open a terminal on linux. some distros have that shortcut

@MrWatchlookingat 7 жыл бұрын

Just wondering if there are any known issues with putting the rubber duckys into DFU mode? No matter how long I hold down the button while inserting it into the USB port it never gets there...

@hak5 7 жыл бұрын

Should only need to hold it down for a few seconds for it to enter the proper mode. If you're having issues, contact us via Hakshop.com!

@rekaens 7 жыл бұрын

Kali Linux of course :)

@modstudio1934 7 жыл бұрын

This does not work when your target has multiple keyboard layouts. When you do windows space op windows you will change keyboard.

@KrK-EST 7 жыл бұрын

With you on this Darren. Fedora ! (productivity and bleeding edge and allways works) Debian is good too. Unity sucks (in so many ways) Don't get me even started on Ubuntu !

@bobtailsquid 5 жыл бұрын

Manjaro Ubuntu PPA's are so outdated.

@JahMusicTube 7 жыл бұрын

Fav. distro: currently Arch!

@tzisorey 7 жыл бұрын

Haha, I think I still have a MkII pineapple, with the battery pack. I'll have to see if I can dig it out sometime. Doubt it still works though - they've fixed the vulnerabilities Jasager used, right?

@benjamindoron7731 7 жыл бұрын

I use Fedora day to day, Debian as a testing (and for everything that I wouldn't run normally) distro in a VM, Kali Linux in a VM and Windows for games. But I've always admired Arch for its customizability and support. However, I refuse to say that Ubuntu is lame, although I dislike Unity. Ubuntu 12.04 was what got me into Linux in the first place.

@benjamindoron7731 7 жыл бұрын

And GNOME 3 all the way.

@MrT6bill 7 жыл бұрын

Linux Lite 3.x is my favorite, by far!

@SPMFlLMS1 7 жыл бұрын

my two fav linux distros are: Kali and of course Ubuntu

@PyPylia 6 жыл бұрын

my favourite distros are linux mint 18.2 and ubuntu mate 16.04 and of course kali

@tizz0r642 7 жыл бұрын

Debian and Ubuntu

@mattb4622 7 жыл бұрын

Would you please make a usb rubber ducky keylogger tutorial?

@dave815078 7 жыл бұрын

What distro is Darren using on the XPS13?

@ttomovcik 7 жыл бұрын

Not sure but looks like fedora

@djderdj 7 жыл бұрын

arch linux with herbstluft wm is very cool

@Aftermost3590 7 жыл бұрын

Kali!

@lowquality9232 7 жыл бұрын

If I may ask, what laptop does Darren use (which is running GNU/Linux)?

@Destide 7 жыл бұрын

Dell XPS 13 top of the terminal

@lowquality9232 7 жыл бұрын

sirico - Thank you

@minkintn 7 жыл бұрын

Judging by the terminal title, an Dell XPS 13

@hak5 7 жыл бұрын

Darren: Macbook, XPS 13, Surface Pro 4. Shannon: XPS 13 Dev Edition, Razer Blade.

@samlister5321 7 жыл бұрын

What is Darren using on the XPS?

@emmanuelvalverderamos 7 жыл бұрын

guys I see that you use Dell xps and I'd like to know how long does It last your battery

@3117master 7 жыл бұрын

just curious what editor do you guys use, VIM or Emacs?

@3117master 7 жыл бұрын

I like Kali and arch

@DarrenKitchen 7 жыл бұрын

I'm a fan of nano. So much so I named a WiFi Pineapple after it ;-)

@djsensacion7 7 жыл бұрын

Gotta say Fedora 25 is fantastic.

@budlong335 7 жыл бұрын

so many flavors of linux....love the options

@aortizc82 7 жыл бұрын

8:35 "Hey, this one actually has ports!" xD

@FishKungfu 7 жыл бұрын

Arch Linux and OpenBSD FTW!

@Coldking12345 7 жыл бұрын

What os is Darren running? I wanna say it's kali but I'm not sure

@Coldking12345 7 жыл бұрын

I just saw his desktop switch. Definitely kali

@bech2342 5 жыл бұрын

What kind of Notebook is in front of you 2 guys? I need some good input to get a new Notebook.

@ottersdangerden 7 жыл бұрын

Mint... because... it works and no dumb unity.

@lucan73630 7 жыл бұрын

What laptop do you use for hacking?

@PeterPan-fl1lp 4 жыл бұрын

Shannon you are to pretty you Keep me watching hak5 video after video not wanting to miss a word ......... brains and beauty the thirst is very real !

@SpencerGreenDotNet 7 жыл бұрын

I actually kinda like Unity. It's not as good as Cinnamon, and I could see Budgie overtaking it once it gets some more polish, but Unity is still a solid desktop environment.