Jump to content

TheHermit

Active Members
  • Posts

    35
  • Joined

  • Last visited

  • Days Won

    3

Posts posted by TheHermit

  1. I have created a site that lets you very easily create duck code for use on the bunny. 

    https://bunnytoolkit.com/create/

    On step two select the "Ducky Code" template. 

    On the next page that appears

    Under payload.txt change SET_LANGUAGE gb to SET_LANGUAGE us

    Then enter any ducky code you like in ducky_code.txt

    Download either the tar or the gz and then just put these contents in to a switch position. 

     

    If you want to use languages other than US you will need to install the DuckToolkit library using the Installer from the github - Details here -

     

    You can also use the ducky template payload - https://github.com/hak5/bashbunny-payloads/tree/master/payloads/library/DuckyTemplate

     

     

     

    • Upvote 1
  2.  

    DuckToolkit installer for Bash Bunny. 
    Adds support for new languages. and uses the Ducktoolkit python library for encoding. 
    
    Version 1.0.0
    
    Moves the libary files to /tools
    Update Q and QUACK to point to the new library
    Writes error to /root/ducky.log
    
    Purple Blinking.................Moving tools
    Purple Solid....................Tools moved
    Amber Blinking..................Setup tools
    Red Solid.......................Tool installation failed
    White Solid.....................Installation completed successfully
  3. Samy Kamkar has released a tool called PoisonTap - https://samy.pl/poisontap/

    tldr; 

    siphons cookies, exposes internal router & installs web backdoor on locked computers

    Created by @SamyKamkar || https://samy.pl

    When PoisonTap (Raspberry Pi Zero & Node.js) is plugged into a locked/password protected computer, it:

    • emulates an Ethernet device over USB
    • hijacks all Internet traffic from the machine (despite being a low priority/unknown network interface)
    • siphons and stores HTTP cookies and sessions from the web browser for the Alexa top 1,000,000 websites
    • exposes the internal router to the attacker, making it accessible remotely via outbound WebSocket and DNS rebinding (thanks Matt Austin for rebinding idea!)
    • installs a persistent web-based backdoor in HTTP cache for hundreds of thousands of domains and common Javascript CDN URLs, all with access to the user’s cookies via cache poisoning
    • allows attacker to remotely force the user to make HTTP requests and proxy back responses (GET & POSTs) with the user’s cookies on any backdoored domain
    • does not require the machine to be unlocked
    • backdoors and remote access persist even after device is removed and attacker sashays away

    He says it should be possible to run on a Lan Turtle,

    Quote

    PoisonTap is built for the $5 Raspberry Pi Zero without any additional components other than a micro-USB cable & microSD card, but can work on other devices that can emulate USB gadgets such as USB Armory and LAN Turtle.

     

    Anyone familiar with creating modules happy to look at this? Else you have to wait till i learn how to write modules. 

     

     

    • Upvote 2
  4. Multiboot LiveUSb the french app is now in english, for the most part anyway.

    here is a quick guide to getting it running. its still a littel rough around the edges once i have played a little more ill update this

    to install on ubuntu

    1. make sure you have build-essentials installed

    sudo apt-get install build-essential

    2. Install the app

    cd /tmp

    wget http://liveusb.info/customultiboot-v2/cust...boot-v2.tar.bz2

    tar xjf customultiboot-v2.tar.bz2

    rm customultiboot-v2.tar.bz2

    cd customultiboot-v2

    sudo ./install.sh

    press ok to any pop ups that appear in french, they are asking to install the prereqs

    3. slight modification to fix an error with the partion creation

    nano /usr/local/share/customultiboot-v2/multiboot/multiboot.sh

    press CTRL + W search for 512o and replace all instances with 512B

    once finsihed CTRL + o and enter to save

    launch application from desktop

    clcik preferences and change default language to english (or language of your choosing) and change the other options which i beleibe are keyboard and regioanl settings

    then press Sauvegarder to save your settings

    Hey presto English

    Thats the install finished.

    Now for creating the multiboot. the application will only add distros that are in its supported list. the supported list can be found here.

    http://translate.google.fr/translate?u=htt...fr&ie=UTF-8

    Now how to make our Multipass

    Click the dvd/usb button

    click create multiboot

    press green arrow

    Depending on the size of your USB key the persistant and home options need to be used carefully, as these reserve space on your key.

    persistent mode allows you to save changes, and the drop down box determines how much can be saved. the home box allows you to set the size of your home folder and to encrypt it if wanted. (Check the suported distros to see if peristnace is supported)

    The activate swap option adds a swap partition to the USB key

    to use either of these optiosn just tick the box and choose the size that suits your needs

    to select your distro clcik the folder icon next to the disc icon and select your iso file. (LINUX ONLY)

    Give it a name and click the add button

    Once you have finshed adding your distros press the Create button

    the app will ask you to unplug and replug your usb key. just press ok to any errors that may pop up about being unable to mount

    once this bild has finsihed we can look at adding windows to our multipass

    the application only allows you to add one of the following options.

    Windows 7 installer

    windows xp installer

    hirens bootcd

    BartPE

    UBCD4Win

    to add one of these clcik home then choose add windows from the selection box.

    browse to the location of your iso file making sure you pick whichever type of iso it is. (its obviouse when you see the screen in front of you.)

    click add and all done.

    i have tested this with Ubuntu 9.04 backtrack 3 and 4 and bart PE at the time of writing, i am working on adding konboot and other img/iso files ill let you know how it goes

    hope this helps someoen and ill update this as i learn more

  5. Multiboot LiveUSb the french app is now in english, for the most part anyway.

    here is a quick guide to getting it running. its still a littel rough around the edges once i have played a little more ill update this

    to install on ubuntu

    1. make sure you have build-essentials installed

    sudo apt-get install build-essential

    2. Install the app

    cd /tmp

    wget http://liveusb.info/customultiboot-v2/cust...boot-v2.tar.bz2

    tar xjf customultiboot-v2.tar.bz2

    rm customultiboot-v2.tar.bz2

    cd customultiboot-v2

    sudo ./install.sh

    press ok to any pop ups that appear in french, they are asking to install the prereqs

    3. slight modification to fix an error with the partion creation

    nano /usr/local/share/customultiboot-v2/multiboot/multiboot.sh

    press CTRL + W search for 512o and replace all instances with 512B

    once finsihed CTRL + o and enter to save

    launch application from desktop

    clcik preferences and change default language to english (or language of your choosing) and change the other options which i beleibe are keyboard and regioanl settings

    then press Sauvegarder to save your settings

    Hey presto English

    Thats the install finished.

    Now for creating the multiboot. the application will only add distros that are in its supported list. the supported list can be found here.

    http://translate.google.fr/translate?u=htt...fr&ie=UTF-8

    Now how to make our Multipass

    Click the dvd/usb button

    click create multiboot

    press green arrow

    Depending on the size of your USB key the persistant and home options need to be used carefully, as these reserve space on your key.

    persistent mode allows you to save changes, and the drop down box determines how much can be saved. the home box allows you to set the size of your home folder and to encrypt it if wanted. (Check the suported distros to see if peristnace is supported)

    The activate swap option adds a swap partition to the USB key

    to use either of these optiosn just tick the box and choose the size that suits your needs

    to select your distro clcik the folder icon next to the disc icon and select your iso file. (LINUX ONLY)

    Give it a name and click the add button

    Once you have finshed adding your distros press the Create button

    the app will ask you to unplug and replug your usb key. just press ok to any errors that may pop up about being unable to mount

    once this bild has finsihed we can look at adding windows to our multipass

    the application only allows you to add one of the following options.

    Windows 7 installer

    windows xp installer

    hirens bootcd

    BartPE

    UBCD4Win

    to add one of these clcik home then choose add windows from the selection box.

    browse to the location of your iso file making sure you pick whichever type of iso it is. (its obviouse when you see the screen in front of you.)

    click add and all done.

    i have tested this with Ubuntu 9.04 backtrack 3 and 4 and bart PE at the time of writing, i am working on adding konboot and other img/iso files ill let you know how it goes

    hope this helps someoen and ill update this as i learn more

  6. The monitor is connected via VGA. been looking at some ideas to make it more 'shock proof'. was thinking of building a full cage to house all the components then fit rubber chocks around the edge then drop the cage in to box for some decent shock absorbing. only problem is im not sure how to connect the cage to the blocks and then the blocks to the case so that it all sits secure and not just jammed in. I got two weeks before I can afford the new monitor so ill think about it and ill upload some new pics when version 2 is released. :)

    and never though about a bat mod. the current draw on this must be too big for anything other than a case full of UPS' if anyone has ideas please let me know.

    and if there is anything else you can think to add/improve which I forgot about

  7. I've been looking into makeing/modding a tabletop arcade cabinet. Primarily I was looking for an empty shell, then fill in the guts with a computer and roms of the Atari games I own.

    Software isn't so much the problem here though. It's the shell. They're not that easy to come by in my next of the woods, and making one in my downtown apartment isn't an option. I noticed there's a few places that sell them online, but they're $2000+ with everything inside. I could buy just the shell, but with shipping and conversion to Canadian, it would be about $1000. Considering all it would be is about $150 in wood + accessories , $40 for the I-Pac controller, and $70 for brand new joysticks and buttons, that's a far cry from $1000.

    Check Season One for a Desktop model including blueprints.

    and here is the one i made the other month

    http://hak5.org/forums/index.php?showtopic=12237

  8. ok perhaps with a little more info we might be able to get this working for you.

    1. I need to know the Impedance value printed on the back of the speakers.

    2. How the speakers are connected. i.e. is there a box sitting in the middle.

    3. What make / Model is the cassette player

    4. a picture of the other side of the board to see your connections

    A few things to bear in mind. The cassette player is designed to output to some headphones. the volume for these is Limited and is designed to be low.

    to plug external speakers in usually requires that the speakers have some sort of internal amp (this would be the box sitting in the middle)

    let me know and ill see if we can come up with something for you

  9. Are you working the same easter egg? Part two didn't have any Python in it :)

    Should Read made the text in the first one easier to recognise. and the same for the 2nd one as well. (thats as far as i got so far) i still had the script i wrote for Python and is easier than doing it by hand :)

  10. whilst i can appreciate that people over the age of 60 or complete technophobes may find the Autorun feature handy. i for one will not miss it. when i plug my usb HUB in for my 4 or 5 external drives it is most annoying to have windows scan them all at the same time just to give me a pop up asking me what i want to do.

    the other thing that annoys me. not sure if it is part of the same sytem or not. If i have WMP open when i plug a drive in. it switches whatever i am watching from the now playing tab to the library tab then asks me what i want to do with it

  11. I thought only legal systems dervrived from anglo-saxon laws were focused on precedent, although this extends to Germanic legal systems to some extent. The legal systems based on Roman laws seem to rely on actual laws more.

    I wont pretned to know a lot about american legal systems but this was taken from Wikipedia. i still dont fully understand exactly how it works but from a quick galnce looks like it could be used against other torrent sites

    Precedent is central to legal analysis and rulings in countries that follow common law like the United Kingdom (except Scotland which retains its own legal system) and Canada (except Quebec). In some systems precedent is not binding but is taken into account by the courts.

    The United States Court of Appeals for the Third Circuit has stated:

    A judicial precedent attaches a specific legal consequence to a detailed set of facts in an adjudged case or judicial decision, which is then considered as furnishing the rule for the determination of a subsequent case involving identical or similar material facts and arising in the same court or a lower court in the judicial hierarchy.

    Source= http://en.wikipedia.org/wiki/Precedent

  12. see i think the bigest problem with this is that its goign to set a precedence with-in the judicial system.

    and i know the following example is a very differnt set of circumstances im just using to to demostrate how precedence is a powerfull tool for a lawyer to use

    in the UK when a bank charged you for an unatherised overdraft it was possible to claim it back following a simple paperwork exercise. several banks decided to appeal this decision so they could continue charging us more money. eventually one of the banks won a case. and shortly there after the rest of the banks followed suite and now with that initial presedence set it is much more difficult if not impossible to use this same 'trick' to get your money back.

    Now any time they want to bring charges/ suites against any other Torrent site like isohunt or one of the many others. the lawyers can simply state i refer to RIAA vs Pirate bay

×
×
  • Create New...