|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/digispark/
课程评论：没有评论
课程名称：设计您自己的USB Rubber Ducky伦理黑客工具！ 课程概述：使用USB Rubber Ducky这种看似普通的USB驱动器，安装后门、提取文件或捕获凭据变得异常简单。在几分钟内，具有专家级别的黑客凭借过人的记忆和完美的打字准确性，能够通过一系列精心设计的按键操作，几乎破解任何他们可以物理接触的设备。然而，配备合适的硬件，可以在任何时候可靠地实现相同的效果。这就是USB Rubber Ducky及其他人机接口设备（HID）发挥作用的地方。它们以超人的速度注入按键操作，侵犯了计算机对人类的固有信任，伪装成键盘。在本课程中，我们将深入了解HID攻击的概念、工作原理、部署过程中涉及的社会工程学，以及如何在渗透测试中有效使用这些技术。 课程内容指向将使用Arduino编程微控制器，以充分利用HID设备的特性。学生将创建当设备插入目标计算机时运行的脚本，且成本仅为众所周知的USB Rubber Ducky的一小部分。课程中还将介绍使用低成本的Digispark编写载荷，以用于伦理黑客和渗透测试。我们会探讨创建更高级的载荷，包括在后台运行的跟踪载荷及用于对朋友和家人进行演示的Rickroll载荷。此外，学生还将学习如何在无人值守设备上实现几乎所有操作的自动化，这在需要在一系列计算机上运行相同命令时极为实用。USB Rubber Ducky的灵感最初来源于创始人Darren Kitchen，他在担任系统管理员时因重复输入相同命令而感到厌倦，他编程了一个开发板来模拟打字，从而诞生了击键注入攻击。 希望通过本课程，学生能够掌握创建和使用USB Rubber Ducky工具及其应用的技能，进一步深入伦理黑客的世界。
Installing backdoors, exfiltrating documents, or capturing credentials is incredibly easy with a seemingly innocent USB drive called the USB Rubber Ducky. An Expert hacker with a few minutes, photographic memory and perfect typing accuracy can use a few well-crafted keystrokes to hack virtually anything they have physical access to. However, the right hardware can do the same thing every time on demand without fail. That's where the Rubber Ducky and other Human Interface Devices (HID) come into play. They inject keystrokes at superhuman speeds, violating the inherent trust computers have in humans by posing as a keyboard.In this class, we'll learn more about what HID attacks are, how they work, the social engineering that can be involved in their deployment, and how to use them in your Pen-testing engagements. Keyboards announce themselves to computers as HID devices and are in turn automatically recognized and accepted. We'll program a microcontroller in Arduino to take advantage of this by acting as an HID device. We can then create our scripts that run when the device is plugged into a target computer. All at only a fraction of the cost of the more well-branded USB Rubber Ducky!Students will learn to use a low-cost Digispark to program their payloads for use in Ethical Hacking and Penetration testing. We'll go over creating more advanced payloads, including tracking payloads which run in the background, as well as Rickroll payloads which can be used with permission on friends and family to demonstrate how HID attacks work. Additionally, students learn to automate nearly anything on an unattended device which can be extremely useful when you need to run the same commands on a series of computers. That's how the Original USB Ruber Ducky was invented. Hak5 founder Darren Kitchen, while working as a sysadmin, got tired of typing the same commands to fix printers and network shares, again and again, the device evolved out of laziness. He programmed a development board to emulate the typing for him - and thus the keystroke injection attack was born.
