From 8f45798dc8903d60497230f6051b5870e1306fd7 Mon Sep 17 00:00:00 2001 From: TW-D <75358550+TW-D@users.noreply.github.com> Date: Sun, 23 Jan 2022 13:30:42 -0500 Subject: [PATCH] Add Wireless Recon Gets useful information about nearby WiFi access points with the "Key Croc". --- .../library/recon/wireless_recon/README.md | 33 +++++++++ .../wireless_recon/wireless-recon_payload.txt | 74 +++++++++++++++++++ 2 files changed, 107 insertions(+) create mode 100644 payloads/library/recon/wireless_recon/README.md create mode 100644 payloads/library/recon/wireless_recon/wireless-recon_payload.txt diff --git a/payloads/library/recon/wireless_recon/README.md b/payloads/library/recon/wireless_recon/README.md new file mode 100644 index 0000000..60c6244 --- /dev/null +++ b/payloads/library/recon/wireless_recon/README.md @@ -0,0 +1,33 @@ +# Wireless Recon + +- Title: Wireless Recon +- Author: TW-D +- Version: 1.0 +- Target: Any +- Category: Recon +- Attackmode: HID + +## Description + +Gets useful information about nearby WiFi access points +with the "Key Croc". + +## Configuration + +From "wireless-recon_payload.txt" change the values of the following variable : +``` + +######## SETUP ######## + +LED SETUP + +export DUCKY_LANG=us + + +``` + +## Trigger + +> +> __wireless-recon +> \ No newline at end of file diff --git a/payloads/library/recon/wireless_recon/wireless-recon_payload.txt b/payloads/library/recon/wireless_recon/wireless-recon_payload.txt new file mode 100644 index 0000000..ddad75b --- /dev/null +++ b/payloads/library/recon/wireless_recon/wireless-recon_payload.txt @@ -0,0 +1,74 @@ +#!/bin/bash +# +# Title: Wireless Recon +# Description: +# Gets useful information about +# nearby WiFi access points +# with the "Key Croc". +# +# Author: TW-D +# Version: 1.0 +# Target: Any +# Category: Recon +# Attackmode: HID +# +# TESTED ON +# =============== +# Ubuntu 20.04.3 LTS with "Logitech Keyboard K120" +# +# STATUS +# =============== +# Magenta solid ................................... SETUP +# Yellow single blink ............................. ATTACK +# White fast blink ................................ CLEANUP +# Green 1000ms VERYFAST blink followed by SOLID ... FINISH +# + +######## TRIGGER ######## + +MATCH __wireless-recon + +######## INITIALIZATION ######## + +readonly IW_SCAN="$(iw wlan0 scan | egrep --extended-regexp 'BSS ([[:xdigit:]]{1,2}:)|signal: |SSID: |\* Manufacturer: |\* Model Number: |\* Serial Number: |\* Device name: ')" + +######## SETUP ######## + +LED SETUP + +export DUCKY_LANG=us + +######## ATTACK ######## + +LED ATTACK + +QUACK DELAY 1000 + +QUACK ENTER +QUACK DELAY 500 + +while IFS= read -r ap; do + info=$(echo "${ap}" | sed -e 's/^[ \t]*//') + QUACK DELAY 300 + QUACK STRING "${info}" + QUACK DELAY 300 + QUACK ENTER +done <<< "${IW_SCAN}" + +QUACK DELAY 1000 + +######## CLEANUP ######## + +LED CLEANUP + +rm -r /root/loot/* + +######## FINISH ######## + +LED FINISH + +sync + +######## OFF ######## + +LED OFF