{"id":18700328,"url":"https://github.com/davidlj95/malduino-password-grabber","last_synced_at":"2025-04-12T08:18:47.817Z","repository":{"id":100657061,"uuid":"97176951","full_name":"davidlj95/malduino-password-grabber","owner":"davidlj95","description":"Arduino sketch to program a Malduino bad USB (lite) to download a password grabber and send the results via email","archived":false,"fork":false,"pushed_at":"2017-07-14T01:24:46.000Z","size":17,"stargazers_count":55,"open_issues_count":0,"forks_count":13,"subscribers_count":3,"default_branch":"master","last_synced_at":"2025-04-12T08:18:42.627Z","etag":null,"topics":["arduino","bad-usb","c","malduino","rubber-ducky"],"latest_commit_sha":null,"homepage":"","language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/davidlj95.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2017-07-14T00:46:12.000Z","updated_at":"2025-03-17T16:31:26.000Z","dependencies_parsed_at":"2023-05-16T14:30:37.797Z","dependency_job_id":null,"html_url":"https://github.com/davidlj95/malduino-password-grabber","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/davidlj95%2Fmalduino-password-grabber","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/davidlj95%2Fmalduino-password-grabber/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/davidlj95%2Fmalduino-password-grabber/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/davidlj95%2Fmalduino-password-grabber/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/davidlj95","download_url":"https://codeload.github.com/davidlj95/malduino-password-grabber/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248537192,"owners_count":21120711,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["arduino","bad-usb","c","malduino","rubber-ducky"],"created_at":"2024-11-07T11:36:43.328Z","updated_at":"2025-04-12T08:18:47.805Z","avatar_url":"https://github.com/davidlj95.png","language":"C++","readme":"# MalDuino Password Grabber\nArduino sketch to program a MalDuino bad USB (lite) to download a password grabber* and send the results via email\n\nPlease read the [Arduino Project](#arduino-project) section to see how to setup your MalDuino bad USB password grabber\n\n\u003e *: designed to work with [NirSoft](https://nirsoft.net) password recovery tools\n\n## Sources\nThe inspiration is a Rubber Ducky payload to grab passwords and send them via email but prepared for [NirSoft.net](https://nirsoft.net) tools\n\nhttps://github.com/hak5darren/USB-Rubber-Ducky/wiki/Payload---download-mimikatz%2C-grab-passwords-and-email-them-via-gmail\n\n## RubberDucky script\nThe file `rubber_ducky_script.txt` contains the RubberDucky script used to generate the Arduino project using the [MalDuino converter](https://malduino.com/converter)\n\n\u003e The generated project though, __contains two errors when generating the CTRL+A and CTRL+S combinations__ so the final project was edited to fix it.\n\u003e \n\u003e To solve it, we used the A and S keystrokes defined in [USB HID](https://www.usb.org/developers/hidpage/Hut1_12v2.pdf) manual after the rubberducky script was transformed, adding 0x88 (136) to each keycode according to the `Keyboard::press` function design in [`lite/Keyboard.cpp`](lite/Keyboard.cpp#L253-L257)\n\n## Arduino project\nIn order to control your MalDuino, the Arduino project called [`lite.ino`](lite/lite.ino) inside `lite` folder can be used to setup your MalDuino bad USB\n\n### Project parameters\nIt's very important to __setup the project parameters__ in the file [`lite\\Params.h`](lite/Params.h) for a succesful execution\n\n#### Which applications to use\nIn order to grab passwords, we tested the project with [nirsoft.net](https://nirsoft.net) [WebBrowserPassView](https://nirsoft.net/utils/web_browser_password.html) but it may work with other NirSoft's applications as they all work the same way\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdavidlj95%2Fmalduino-password-grabber","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdavidlj95%2Fmalduino-password-grabber","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdavidlj95%2Fmalduino-password-grabber/lists"}