search

exploitagency / ESPloitV2

WiFi Keystroke Injection Tool designed for an Atmega 32u4/ESP8266 Paired via Serial (Cactus WHID Firmware). Also features Serial, HTTP, and PASV FTP exfiltration methods and an integrated Credential Harvester Phishing tool called ESPortal.
MIT License
558 stars 136 forks source link

Using the device as a remote keyboard #52

Open RLSUK opened 5 years ago

RLSUK commented 5 years ago

Hi, I hope you can help me with this. I have got the USB device working and its currently connected to my local WiFi and I am able to browse the unit from a web browser. My aim for this device is to use it as a remote keyboard to send keystrokes from one PC to another PC via a a custom windows application on the remote PC.

Apart from the HTML webpage that requires me to physically type things into the form, is there a way I can perform keystrokes from an application that I develop? Is there a webservice or something that my program can connect to and initiate keyboard commands?

Thank you for any help you can offer.

whid-injector commented 5 years ago

It's not difficult, it was already implemented an app for Android, to remotely control WHID. https://github.com/whid-injector/WHID-Mobile-Connector https://play.google.com/store/apps/details?id=whid.usb.injector&hl=it

Look at the ESP sketch https://github.com/exploitagency/ESPloitV2/blob/master/source/ESP_Code/ESP_Code.ino and intercept real requests with Burp or ZAP to see which POST and GET requests are used.