wifi_ducky icon indicating copy to clipboard operation
wifi_ducky copied to clipboard

Just showing

Open supersjimmie opened this issue 8 years ago • 39 comments

Here's my result: Supersjimmie USB WiFi Ducky

supersjimmie avatar Jun 22 '17 11:06 supersjimmie

The 2 buttons and the 3-pin header are just extra's and can be removed.

supersjimmie avatar Jun 27 '17 07:06 supersjimmie

Hi, I've got some questions about your creation. Have you got Discord account or... email?

adamff-dev avatar Aug 23 '17 21:08 adamff-dev

img_0788

I win. ;)

0xCoto avatar Aug 23 '17 22:08 0xCoto

Oh, man. You evil guy.

adamff-dev avatar Aug 23 '17 22:08 adamff-dev

@0xCoto Could you share, how you made this?

Mr-iX avatar Aug 24 '17 19:08 Mr-iX

@Mr-iX Connected all the Pins, uploaded the USB-to-Serial Arduino Code to the SS Micro, flashed the ESP-12E with the esp-flasher.exe and uploaded the Arduino-Ducky code to the SS Micro.

0xCoto avatar Aug 26 '17 14:08 0xCoto

So this build solves the problem of not being able to flash after soldering, am I right ?

tobozo avatar Aug 26 '17 16:08 tobozo

img_0712

@0xCoto Is that the right circuit diagram for this build? Where have you hidden all the required cables?

Mr-iX avatar Aug 26 '17 18:08 Mr-iX

@Mr-iX I think your diagram is completely wrong. He has hidden the cables under the ESP-12E, there is enough space.

adamff-dev avatar Aug 26 '17 18:08 adamff-dev

@BlueArduino20 I just draw the diagram side-by-side only for simplicity. You have to move the right side (ESP-12E) over the left side (Arduino SS Micro), to have the real construction.

Mr-iX avatar Aug 26 '17 19:08 Mr-iX

@Mr-iX Then why are you asking where I hid the cables?

And no, that is not the correct diagram.

0xCoto avatar Aug 26 '17 19:08 0xCoto

@0xCoto I haven't known if there is enough space. But now I know ;) What is wrong with the diagram? I thought this would be right for flashing the ESP module.

Mr-iX avatar Aug 26 '17 19:08 Mr-iX

These are the correct connections: TX to RX RX to TX 3.3v to VCC GND to GND GND to GPIO15 D14 to GPIO0 D15 to EN

0xCoto avatar Aug 26 '17 19:08 0xCoto

@Mr-iX I wasn't saying that the cables are the problem of the diagram.

adamff-dev avatar Aug 26 '17 19:08 adamff-dev

Now this should be the correct one. Maybe it helps someone in the future. img_0713

@BlueArduino20 Sorry I understood you wrong

Mr-iX avatar Aug 26 '17 19:08 Mr-iX

@Mr-iX Yeah, that should be the right diagram. Also you need to modify the first two lines of the serial code. From:

int program_pin = 12;
int enable_pin = 13;

To:

int program_pin = 14;
int enable_pin = 15;

adamff-dev avatar Aug 26 '17 19:08 adamff-dev

@BlueArduino20 what do you mean you have a question and want my mail?

@0xCoto yeah you win with that picture. but I have now a complete working combination of both @spacehuhn Keylogger and @spacehuhn wifi_ducky together in one code and one piece of hardware built into an HP keyboard. I could place a picture here, but that would just be a pic of an HP keyboard. :) So here's the keyboard opened: img_3971

This nifty thing is capable of logging keystrokes, making them visible over it's own hidden wifi, and then attacking with a Ducky-script over that wifi again. I made a small demo here with my friends with a clean W10 pc. The pc was not connected to any network. One person was asked to change the local password and lock the pc. Then I took that password out of the keylogger-data and placed it into a Ducky script that unlocked the pc. After unlocking another Ducky script started notepad and typed the text:

You have been Ducked.
Your password is...  (showing the password here)

Even after I told them that is was "some kind of hardware" it took them a lot of time and several hints to discover it.

supersjimmie avatar Aug 30 '17 11:08 supersjimmie

@supersjimmie That's awesome! I would love to learn more, since Spacehuhn's Keylogger is pretty large and not as incognito as this ^. Been trying to make such hardware for a long time. What's your Discord/Skype/Twitter?

0xCoto avatar Aug 30 '17 15:08 0xCoto

@BlueArduino20 : Where can this Serial-Code be found? int program_pin = 14; int enable_pin = 15;

Cannot find these variables in any of those files? Thanks!

careyer avatar Aug 31 '17 23:08 careyer

@careyer https://gist.github.com/spacehuhn/b2b7d897550bc07b26da8464fa7f4b36

0xCoto avatar Sep 01 '17 13:09 0xCoto

@0xCoto thank you very much.... i did not realize that I had to flash a completely different sketch to the arduino ;-). I thought that there must be a way to do it via the Update function in the GUI (Info Tab --> Update).

careyer avatar Sep 04 '17 12:09 careyer

@0xCoto just use my Github name at gmail dot com (I'm not reading that account daily though)

supersjimmie avatar Sep 05 '17 06:09 supersjimmie

@supersjimmie are you going to share that bby on your github?

br0k3nilluzion avatar Sep 06 '17 04:09 br0k3nilluzion

@supersjimmie I sent you a mail.

0xCoto avatar Sep 06 '17 21:09 0xCoto

@br0k3nilluzion would love to do so, but I just started at my new job so I don't have much time. But I did start thinking about it... @0xCoto replied. ;)

supersjimmie avatar Sep 07 '17 05:09 supersjimmie

@supersjimmie yeah I feel you on that.. all work and no play. Would love to see it when you get a chance to share.

br0k3nilluzion avatar Sep 17 '17 05:09 br0k3nilluzion

I second that @br0k3nilluzion, @supersjimmie is exactly....down to the keyboard what I'm going for

GarethWright avatar Sep 18 '17 13:09 GarethWright

Now I have built the WiFi Ducky from @0xCoto. I have connected all the wires (picture above) and uploaded this to the Arduino: int program_pin = 14; int enable_pin = 15;

void setup() { Serial1.begin(115200); Serial.begin(115200); pinMode(enable_pin, OUTPUT); pinMode(program_pin, OUTPUT); digitalWrite(program_pin, LOW); digitalWrite(enable_pin,HIGH); }

void loop() { while(Serial1.available()){ Serial.write((uint8_t)Serial1.read()); }

if(Serial.available()){ while(Serial.available()){ Serial1.write((uint8_t)Serial.read()); } } }

But when I try to flash the esp8266_wifi_duck_4mb.bin file to the ESP8266, I get following error message: sh-3.2# esptool.py --port /dev/cu.usbmodem3A21 write_flash -fm dio 0x00000 esp8266_wifi_duck_4mb.bin esptool.py v2.0.1 Connecting.....................................................

A fatal error occurred: Failed to connect to Espressif device: Timed out waiting for packet header

I have tried a second ESP and Arduino, but I get the same error. Can you give me a hint what I'm doing wrong?

Mr-iX avatar Sep 22 '17 21:09 Mr-iX

@Mr-iX Have you tried with the esp-flasher.exe? It worked for me.

0xCoto avatar Sep 23 '17 15:09 0xCoto

@0xCoto You mean that tool? https://github.com/nodemcu/nodemcu-flasher

It worked with that, but after all steps, I cannot find a WiFi Network

Mr-iX avatar Sep 23 '17 18:09 Mr-iX