FlipperZero: BadUSB JavaScript (deploys payloads+show exfil data on Flipper)

Опубликовано: 06 Апрель 2024
на канале: Derek Jamison
3,823
146

In this video we look at an example of JavaScript in the Momentum firmware. We use APIs to copy a file from our SD card into a virtual USB Disk. We use APIs to type PowerShell commands on the PC. Our PowerShell auto-detects the Flipper & copies payloads locally, runs commands and stores results back on the virtual USB Disk. We use APIs to copy the virtual USB Disk results back to the SD card memory. We use APIs to show the file directly on the Flipper (IP addresses of the machine + saved WIFI credentials.)

MAKE SURE YOUR SCRIPT HAS THE PROPER KEYBOARD LAYOUT! USING THE WRONG LAYOUT IS A COMMON CAUSE OF A MISBEHAVING SCRIPT.

The Flipper isn't doing anything "magic". You could manually type all of these commands (or a subset of them) and see the exact same information. Flipper Zero is just automating the process; click run and then see the results a couple minutes later! Remember -- only test on machines you own! (WARNING: BE CAREFUL. Bad-USB does NOT KNOW where it is typing, so if it isn't in the PowerShell window, it could type over important documents or start pressing buttons in your email or other programs!)

Join the discord server (conversations and giveaways):   / discord  

Support this channel:
Option 1. Like, Subscribe and click the Bell (to get notified)
Option 2. https://ko-fi.com/codeallnight (donate $3 via PayPal or Venmo)
Option 3. Click the "Thanks" button on YouTube.
Option 4. Purchase a FlipBoard (I get a portion of the sale). https://github.com/MakeItHackin/FlipB...

You can find the script from this video here:
https://github.com/jamisonderek/flipp...

Also join momentum Discord server [see the script-sharing channel]:
  / discord  

Timeline:
0:00 - Introduction
1:24 - Configuration
3:12 - JavaScript walkthrough
6:12 - Call Flipper native code from JavaScript! (FFI)
7:24 - Summary


Смотрите видео FlipperZero: BadUSB JavaScript (deploys payloads+show exfil data on Flipper) онлайн, длительностью часов минут секунд в хорошем качестве, которое загружено на канал Derek Jamison 06 Апрель 2024. Делитесь ссылкой на видео в социальных сетях, чтобы ваши подписчики и друзья так же посмотрели это видео. Данный видеоклип посмотрели 3,823 раз и оно понравилось 146 посетителям.