https://github.com/farinap5/tinyduck
Ruberduck like payloads for Attiny85.
https://github.com/farinap5/tinyduck
Last synced: about 1 month ago
JSON representation
Ruberduck like payloads for Attiny85.
- Host: GitHub
- URL: https://github.com/farinap5/tinyduck
- Owner: farinap5
- Created: 2022-07-20T23:40:22.000Z (almost 3 years ago)
- Default Branch: main
- Last Pushed: 2022-07-21T00:37:53.000Z (almost 3 years ago)
- Last Synced: 2025-01-21T00:50:39.619Z (3 months ago)
- Language: C++
- Size: 1000 Bytes
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
TinnyDuck
Attiny85 is a small and cheap microcontroller commonly used to replace the RubberDuck pentest tool when performing exploitation training or even phisycal pentest. The microcontroller board is an 8bit AVR with a focus on building IoT (Internet of Things) systems, but it becomes very malleable by the wide programming possibilities, so building a system for command injection becomes a very simple and intuitive task.
We can program it using the `DigiKeyboard.h` library that will simulate a keyboard and execute key codes to build the interaction, so it is possible to execute a sequence of commands like open a new shell and in seconds, download a reverse shell and run it to gain access from another listening server.
## DISCLAIMER
All tools and scripts reported and used in this repository serve solely and exclusively as material for research and learning purpose. The creator of this project is not responsible for any damage caused by the scripts. Use of these repository is at your own risk.
## Code
### 1 - Download and execute
The [code 1](code1.ino) is created to work on linux systems with XFCE interface. This code will execute the sequence to open the search bar and execute a new instance of the terminal, then in the terminal it runs the command to download the executable, the proper permissions will be given to the executable and it will be run.
Use something like `python` (`python3 -m http.server`) to delivery the payload.