Skip to content
Exploitation Framework for ATtiny85 Based HID Attacks
C++ Python
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
conf Finishing touches May 19, 2019
modules fixed distro May 19, 2019
output Uploaded files May 17, 2019
scripts/windows Finishing touches May 19, 2019
README.md
flashsploit.py fixed distro May 19, 2019

README.md

Exploitation Framework for ATtiny85 HID Attacks

Twitter - Telegram - Blog


Available in

Flashsploit is an Exploitation Framework for Attacks using ATtiny85 HID Devices such as Digispark USB Development Board, flashsploit generates Arduino IDE Compatible (.ino) Scripts based on User Input and then Starts a Listener in Metasploit-Framework if Required by the Script, in Summary : Automatic Script Generation with Automated msfconsole.

Features

  • TODO : Add Linux and OSX Scripts

Windows

Data Exfiltration

  • Extract all WiFi Passwords and Uploads an XML to SFTP Server | YouTube :

Youtube

  • Extract Network Configuration Information of Target System and Uploads to SFTP Server | YouTube :

Youtube

  • Extract Passwords and Other Critical Information using Mimikatz and Uploads to SFTP Server | YouTube :

Youtube

Reverse Shells

  • Get Reverse Shell by Abusing Microsoft HTML Apps (mshta) | YouTube :

Youtube

  • Get Reverse Shell by Abusing Certification Authority Utility (certutil)
  • Get Reverse Shell by Abusing Windows Script Host (csript)
  • Get Reverse Shell by Abusing Windows Installer (msiexec)
  • Get Reverse Shell by Abusing Microsoft Register Server Utility (regsvr32)

Miscellaneous

  • Change Wallpaper of Target Machine | YouTube :

Youtube

  • Make Windows Unresponsive using a .bat Script (100% CPU and RAM usage)

Youtube

  • Drop and Execute a File of your Choice, a ransomware maybe? ;)
  • Disable Windows Defender Service on Target Machine

Youtube

Tested on

  • Kali Linux 2019.2
  • BlackArch Linux

Dependencies

Flashsploit Depends upon 4 Packages which are Generally Pre-installed in Major Pentest OS :

  • Metasploit-Framework
  • Python 3
  • SFTP
  • PHP

If you think I should still make an Install Script, Open an issue.

Installation / Usage

BlackArch Linux

pacman -S flashsploit

Kali Linux

git clone https://github.com/thewhiteh4t/flashsploit.git 
cd flashsploit
python3 flashsploit.py 
You can’t perform that action at this time.