https://github.com/davidlj95/malduino-password-grabber

Arduino sketch to program a Malduino bad USB (lite) to download a password grabber and send the results via email
https://github.com/davidlj95/malduino-password-grabber

arduino bad-usb c malduino rubber-ducky

Last synced: 2 months ago
JSON representation

Arduino sketch to program a Malduino bad USB (lite) to download a password grabber and send the results via email

• Host: GitHub
• URL: https://github.com/davidlj95/malduino-password-grabber
• Owner: davidlj95
• License: apache-2.0
• Created: 2017-07-14T00:46:12.000Z (almost 8 years ago)
• Default Branch: master
• Last Pushed: 2017-07-14T01:24:46.000Z (almost 8 years ago)
• Last Synced: 2025-04-12T08:18:42.627Z (2 months ago)
• Topics: arduino, bad-usb, c, malduino, rubber-ducky
• Language: C++
• Homepage:
• Size: 16.6 KB
• Stars: 55
• Watchers: 3
• Forks: 13
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# MalDuino Password Grabber

Arduino sketch to program a MalDuino bad USB (lite) to download a password grabber* and send the results via email

Please read the [Arduino Project](#arduino-project) section to see how to setup your MalDuino bad USB password grabber

> *: designed to work with [NirSoft](https://nirsoft.net) password recovery tools

## Sources

The inspiration is a Rubber Ducky payload to grab passwords and send them via email but prepared for [NirSoft.net](https://nirsoft.net) tools

https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Payload---download-mimikatz%2C-grab-passwords-and-email-them-via-gmail

## RubberDucky script

The file `rubber_ducky_script.txt` contains the RubberDucky script used to generate the Arduino project using the [MalDuino converter](https://malduino.com/converter)

> The generated project though, __contains two errors when generating the CTRL+A and CTRL+S combinations__ so the final project was edited to fix it.

> 

> To solve it, we used the A and S keystrokes defined in [USB HID](https://www.usb.org/developers/hidpage/Hut1_12v2.pdf) manual after the rubberducky script was transformed, adding 0x88 (136) to each keycode according to the `Keyboard::press` function design in [`lite/Keyboard.cpp`](lite/Keyboard.cpp#L253-L257)

## Arduino project

In order to control your MalDuino, the Arduino project called [`lite.ino`](lite/lite.ino) inside `lite` folder can be used to setup your MalDuino bad USB

### Project parameters

It's very important to __setup the project parameters__ in the file [`lite\Params.h`](lite/Params.h) for a succesful execution

#### Which applications to use

In order to grab passwords, we tested the project with [nirsoft.net](https://nirsoft.net) [WebBrowserPassView](https://nirsoft.net/utils/web_browser_password.html) but it may work with other NirSoft's applications as they all work the same way