Flatlinebb Posted November 12, 2019 Share Posted November 12, 2019 Hey @Darren Kitchen, I thought I heard you mention using a smartphone to exfil the loot off the Shark Jack. Does the SJ work as a USB drive in any capacity, via OTG, when connected to a smartphone? Or is there some other method I'm not thinking of? Maybe run a tiny samba share payload off the SJ, then connect it to the OTG via the USB NIC and watch the world fold in onto itself into a singularity? Or connect a USB flash drive into the USB-C port on the SJ, then mount it and copy the loot in the shell to the USB drive? Has anyone tried that? Not sure if there is enough juice in the battery to power the SJ and a USB drive at the same time. Or add a USB Wireless dongle to the SJ, create a hotspot on the smartphone, connect to the hotspot on the SJ, then exfil via shell/C2/SMB etc. Quote Link to comment Share on other sites More sharing options...
Darren Kitchen Posted November 12, 2019 Share Posted November 12, 2019 If your phone support a USB Ethernet dongle, you can exfiltrate data via the web UI from your phone. I'm sure many other methods - like SMB as you mentioned - would work similarly. The USB-C port is only for charging. Interestingly, you can use your phone to charge the Shark Jack. Select "Connected device" from USB controlled by on the USB Preferences menu. 1 Quote Link to comment Share on other sites More sharing options...
Flatlinebb Posted November 13, 2019 Author Share Posted November 13, 2019 What phone are you rocking, Darren? I'm currently using a Pixel 3 XL. And while it detects the USB LAN adapter over OTG when plugged into a network cable, Google seems to have taken the LAN menu away, because I cannot manipulate the IP address. So when I plug the Shark Jack into the USB LAN adapter in Arming mode, my phone cannot load the internal webpage. And yes, the charging works, so that is a good backup battery plan 🙂 Quote Link to comment Share on other sites More sharing options...
InfoSecREDD Posted December 30, 2019 Share Posted December 30, 2019 On 11/13/2019 at 10:57 AM, Flatlinebb said: What phone are you rocking, Darren? I'm currently using a Pixel 3 XL. And while it detects the USB LAN adapter over OTG when plugged into a network cable, Google seems to have taken the LAN menu away, because I cannot manipulate the IP address. So when I plug the Shark Jack into the USB LAN adapter in Arming mode, my phone cannot load the internal webpage. And yes, the charging works, so that is a good backup battery plan 🙂 I can tell you at the time of that post, he was rocking the Pixel 2.. And I did a little research for you.. Looks like you need a WiFi USB-A AX88179 Chipset Dongle.. (And some others work too). I'm also looking at a way to exfiltrate Data on the go from the SharkJack.. So far only way is with C2 or with a Laptop. Quote Link to comment Share on other sites More sharing options...
Flatlinebb Posted January 11, 2020 Author Share Posted January 11, 2020 Thanks @REDD! I was just throwing out ideas, each one more crazy than the last. And the SharkJack kit I bought actually included a USB LAN adapter that works quite nicely. Not gigabit, but I doubt the Shark can saturate it anyway. If that USB-C port could do something besides charging, THAT would open up possibilities. Might even solve your low space issue, REDD. Quote Link to comment Share on other sites More sharing options...
InfoSecREDD Posted January 14, 2020 Share Posted January 14, 2020 On 1/10/2020 at 6:21 PM, Flatlinebb said: Thanks @REDD! I was just throwing out ideas, each one more crazy than the last. And the SharkJack kit I bought actually included a USB LAN adapter that works quite nicely. Not gigabit, but I doubt the Shark can saturate it anyway. If that USB-C port could do something besides charging, THAT would open up possibilities. Might even solve your low space issue, REDD. @Flatlinebb Yeah, I sadly don't have a dongle that is supported.. (Exactly what @Darren Kitchen has shown in his post.) But I'm glad you can verify you found a dongle that works. Would you mind posting the model, etc?.. Quote Link to comment Share on other sites More sharing options...
Flatlinebb Posted January 14, 2020 Author Share Posted January 14, 2020 "LANO208B" LAN to USB2.0 adapter. Shows up in Windows 10 as "ASIX AX88772B USB2.0 to Fast Ethernet Adapter". No special drivers installed. 1 Quote Link to comment Share on other sites More sharing options...
Aaron Outhier Posted June 21, 2020 Share Posted June 21, 2020 On 1/13/2020 at 6:30 PM, Flatlinebb said: "LANO208B" LAN to USB2.0 adapter. Shows up in Windows 10 as "ASIX AX88772B USB2.0 to Fast Ethernet Adapter". No special drivers installed. I have this adapter also. It comes in the SharkJack “kit”, available when you purchase your SharkJack from Hak5. You won’t get it if you just purchased the SharkJack ala carte. Quote Link to comment Share on other sites More sharing options...
Aaron Outhier Posted June 21, 2020 Share Posted June 21, 2020 On 11/13/2019 at 10:57 AM, Flatlinebb said: my phone cannot load the internal webpage. I am not aware of there being any internal web page or web server. AFAIK, the only access is via SSH and that is a Linux command prompt only. Quote Link to comment Share on other sites More sharing options...
Aaron Outhier Posted June 21, 2020 Share Posted June 21, 2020 11 minutes ago, Aaron Outhier said: I am not aware of there being any internal web page or web server. Well, everyday is a school day! Since the question was raised, I went and checked. Sure enough, there is a web server! Quote Link to comment Share on other sites More sharing options...
Darren Kitchen Posted June 26, 2020 Share Posted June 26, 2020 @Aaron Outhier that web server was introduced in the latest firmware and is only present in arming mode. It's a convenient way to see loot and update payloads. Quote Link to comment Share on other sites More sharing options...
.thumb.jpg.a233ae6239550525f45190659be48cf8.jpg)
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.