Skip to content

Arduino sketch to program a Malduino bad USB (lite) to download a password grabber and send the results via email

License

Notifications You must be signed in to change notification settings

davidlj95/malduino-password-grabber

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

MalDuino Password Grabber

Arduino sketch to program a MalDuino bad USB (lite) to download a password grabber* and send the results via email

Please read the Arduino Project section to see how to setup your MalDuino bad USB password grabber

*: designed to work with NirSoft password recovery tools

Sources

The inspiration is a Rubber Ducky payload to grab passwords and send them via email but prepared for NirSoft.net tools

https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Payload---download-mimikatz%2C-grab-passwords-and-email-them-via-gmail

RubberDucky script

The file rubber_ducky_script.txt contains the RubberDucky script used to generate the Arduino project using the MalDuino converter

The generated project though, contains two errors when generating the CTRL+A and CTRL+S combinations so the final project was edited to fix it.

To solve it, we used the A and S keystrokes defined in USB HID manual after the rubberducky script was transformed, adding 0x88 (136) to each keycode according to the Keyboard::press function design in lite/Keyboard.cpp

Arduino project

In order to control your MalDuino, the Arduino project called lite.ino inside lite folder can be used to setup your MalDuino bad USB

Project parameters

It's very important to setup the project parameters in the file lite\Params.h for a succesful execution

Which applications to use

In order to grab passwords, we tested the project with nirsoft.net WebBrowserPassView but it may work with other NirSoft's applications as they all work the same way

About

Arduino sketch to program a Malduino bad USB (lite) to download a password grabber and send the results via email

Topics

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages