Jump to content

KeySweeper


mreidiv

Recommended Posts

"KeySweeper is a stealthy Arduino-based device, camouflaged as a functioning USB wall charger, that wirelessly and passively sniffs, decrypts, logs and reports back (over GSM) all keystrokes from any Microsoft wireless keyboard in the vicinity"

Link to comment
Share on other sites

There was a thread on this over on slashdot yesterday. The real innovation here the device he's using to scan the radio with. Aside from that it only shows that wireless keyboards and mice are, well, crap from a security perspective. And that shouldn't come as any surprise since there's going next to no data across the link and there are simply no sources of entropy for the keyboard to properly encrypt the data with, let alone a sufficiently powerful CPU integrated to actually perform that encryption.

Link to comment
Share on other sites

Wonder if one could use the Hardware SDK on the Pineapple and connect the radio, then port the code as an infusion. Or run the original python code directly. Then you could not only sniff Wifi, but also go for the low hanging fruit.

I also found the CreepyDOL very interesting as well.

Link to comment
Share on other sites

In the write-up by Samy I read that the link protocol differed from wifi so a typical wifi radio wouldn't work. An SDR would, but those cheap things can't go over 2.2GHz or some such number whereas this device operates on 2.4GHz (like wifi). He contemplated using a HackRF but that would increase the cost quite a bit and also size-wise cause problems.

Link to comment
Share on other sites

I wonder if all this is needed, and if you could do the same thing with an uber? keyboards and mice, while they do talk on 2.4, as far as I know, are all bluetooth based, so you'd be sniffing native bluetooth on any wireless keyboard, and just need to be able to intercept that and decode it(I think). Is it the ubertooth that does bluetooth, or was there a new SDR tool that was being put out(I'm bit behind on tools, episodes and whats out there being used these days)

Link to comment
Share on other sites

  • 6 months later...

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...