search

insecurityofthings / jackit

JackIt - Exploit Code for Mousejack
807 stars 144 forks source link

Testing Dell KM636 Wireless Mouse and Keyboard #38

Open carlosfvp opened 6 years ago

carlosfvp commented 6 years ago

Hello,

I've been testing the vulnerability on the keyboard but I'd like to know wich vendor you used to test this. Is there something you forgot to upload?

Thank you!

carlosfvp commented 6 years ago

To make it work first you must detect the "key up" packet right? I will make some tests and put the results.

carlosfvp commented 6 years ago

Tried without success. Can you please provide more info of what you tested?

phikshun commented 6 years ago

The Dell KM636 combo is just OEM Logitech unifying keyboard/mouse combo. It should detect as a Logitech. I tested with the mouse before, seemed to work so I added it to the list. I can't recall if I tested with the keyboard.

The attack is a lot more difficult with keyboards in general though. There are a lot of channels to scan through and keyboards are much less chatty.

Keep in mind that none of this is intended functionality and both OS and hardware vendors have released patches to prevent some forms of this attack, so your mileage may vary. Also, it definitely won't work on Linux--their Logitech unifying stack wasn't vulnerable to begin with.

carlosfvp commented 6 years ago

So I should test only with mouse. With your test you were able to inject keystrokes? or just replay attacks?