Hacking Computers from Blocks Away With a Wi-Fi Duck

[@jonathanwarner1844]

A Rick-roll as a payload - that's sadistic!

[@Chloemuswagon]

"or even worse..." haha that got me

[@fairedelapeche1300]

Thank you for taking the time to teach us. I would like to address the people who think no one would leave their laptop unattended in a coffee shop etc. I am 60 plus and female. I can't tell you how many people have asked me to watch their laptop while they go to the bathroom, order another drink etc. I look "harmless". 💀

[@SecurityFWD]

So true! Thanks for sharing!

[@patthetech]

"or even worse(attack)" *rickrolls* brilliant.

[@spacesser4535]

That's what I'm thinking about.....

[@V1c10us-p4nd4]

how?

[@spacesser4535]

@@V1c10us-p4nd4 hmmmm.... Just a hack that suddenly make his screen have that rickrolls video. 😅

[@rexleague8740]

You know he is a serious hacker when he has Stickers on his Laptop

[@davesthedude]

The note stickers the more hacks one has pulled off

[@fezzes428]

the defcon sticker in particular is a staple of pro hackers

[@selami32]

every sticker represents his victims

[@commenter7893]

I use ubuntu, have bios password, encrypted disk with password and user password. I wonder if he can hack my unattended password protected computer. Honest question.

[@paulwoerks]

@@commenter7893 yea you can get the decryption key stored on the RAM as long as the computer is powered on. Even if you shut it of one can physically freeze the RAM a couple of minutes after, copy the stored info and extract encryption key. But there are a few other less complex methods that come to my mind too like using a key logger or an evil maid attack. The only way to really make sure no one hacks into your computer is having an eye on it all the time tbh.

[@sfperalta]

Sadly, an attack that relies on the stupidity of the clueless victim is an all-too-real scenario.

[@NFS-shade]

White Chicks Movie

[@kpopempire1475]

This is exactly why you install and activate the usbguard daemon on your Linux system.

[@allenshepard7992]

Thanks for the update. We have docking stations at work where USBs (type a or c) can be plugged in. Not good. I learn something every day.

[@tribejudah9665]

I can imagine going to a friend's home for a barbeque, let's say the head project manager of XYZ company, and installing this on a company laptop if the USB isn't disabled.

[@SecurityFWD]

Exactly, may offices are vulnerable too. Because of computers turned to customers or left unlocked in cubical ext..

[@dougaltolan3017]

If the same vulnerability would work with the ducky plugged into a USB hub which is plugged into the target machine then the ducky could also *be* that hub with a flash drive as one device and the keyboard as another. That way the victim could be persuaded to use the ducky as a functional flash drive. In which case to window for attack is much longer and there is no need for such surreptitious activity as plugging something into an unattended computer.

[@randomstatements8034]

You can make that if you use twin duck on your rubber ducky

[@benbeale2727]

Pretty sneaky... Also, don't end up on any security cameras plugging shit into random computers 🤣. That defeats the whole purpose of not leaving traces on the machine.

[@SecurityFWD]

Haha, good point! WiFi cameras can be deauthed.

[@IsraelThomas-fv3od]

oh my gosh!! @@SecurityFWD

[@II-er7gj]

By the way - that sign Varonis on your backpack 0:18 in Latvian mean Hero! You are real security Hero!!! That is very nice!! :)

[@SecurityFWD]

That's awesome! It's the name of the company that sponsor's this show.

[@AJ-lu3wx]

Me: "what's this strange peripheral device?...unplugs"

[@SecurityFWD]

The duck works surprisingly well plugged in behind a desktop.

[@myusername111]

bro you would win against a cat at a staring contest you don't blink

[@SecurityFWD]

The Kody isn't programed to blink haha

[@myusername111]

@@SecurityFWD waiting for softpatch 6.3 XD

[@baller84milw]

Anybody ever tell you that you look like that British guy from Map Men? You guys look like twins, 100% doppelgangers. I'm half convinced I'm in The Truman Show and the directors underestimated my memory and cast the same actors twice.

[@TechMechRandom]

This is interesting. I am just not sure how I feel about it. There are better attack vectors that don't require many hands on deck and less risk of being caught. This would be one of those (sitting on the edge of your seat) attacks in a Mission Impossible suspense scenes. "Oh man, they are going to see the foot long tail sticking out of their laptop if they look. Oh no, they are looking..."

[@randomstatements8034]

Could you give some examples of other attack vectors as i am new to the topic and I am not familiar with much. Thanks

[@AJ-Palermo]

yet school wifi has trouble going more than 30ft from an access point

[@Therealguymins]

I enjoy your framed Sentient Hyper-Optimized Data Access Network

[@kaiwang7630]

I used to leave the predecessor USB Rubber Ducky around the office and the payload was to load up Rick Roll. There something satisfying to find out the evolved version wifi duck is now carrying the torch.

[@SecurityFWD]

There's also the Digispark, a ~$1 USB Rubber Ducky that's pretty cool.

[@supervortex8363]

already taken control of defence satilites

[@steve-ip1cd]

I just got my ass kicked after plugging in the duck. Hopefully I get out of the hospital this week.

Did he just.... literally teaches people how to hack???

[@djneon12]

this text was remotely place here.

[@spacehuhn]

nice thinkpads

[@anotherbasedpepe]

yo u gotta update that esp8266 wifi hacker

[@iampg42]

Hey spacehuhn

[@badatpseudoscience]

Not trying to be one of those types of posters but at 1:44 the yagi directional antenna is backwards. Its pointing away from the WiFi Duck.

[@SecurityFWD]

Haha that is a good catch, our editor was not a wifi person

[@VIVEVIEV]

3:34 That guy laughed LMAO

[@yjust2813]

shit i want to know how to use this and troll my friends with rick rolling

[@twong689]

My next wall perp hacked into my LAN. They first cracked the WiFi hotspot, from there they breach the home network. Once I set up white list in the router, they are blocked out.

[@askwhat_]

he still don't blink guys

[@SecurityFWD]

He isn't programmed to blink haha

[@anthonyrickardii6198]

Pretty freakin awesome! Question! Can a regular nano adruino work as well as same with ESP8266 ESP be used as the same thing ? If so is scripts still the same?

[@nikf3188]

You are the lockpicking lawyer?!

[@SecurityFWD]

I wish haha

[@nikf3188]

@@SecurityFWD You sounded similar there for a minute :)

[@paranoidzkitszo]

But the resl question(and almost no mention of it...) That yaggi antenna! Can-tenna.... Where'd ya obtain such a marvel of modern day technology???

[@faranahmadk7401]

Every hacker has her fixation. You hack people. I hack time. ~ Whiterose

[@mingosutu]

The video is about not leaving your computer unattended

[@fpshimanshuyadav171]

your eye contact with the camera though

[@SalvadorDali-v8b]

Are there any differences between Dstike wifi duck and Cactus WHID?

[@watisonik]

How does one protect themselves from such an attack?

[@plomek5039]

if a hacker doesn't blink that means hes a good hacker

[@TohaToni]

Is the case same if a computer is locked, let say with Win 10 installed?

[@SecurityFWD]

The hacker would have to know the password in that case, from phishing or some other attack.

[@ascendordie7427]

why dont you just put a program onto the usb that will auto install a rat bypassing the need for a second hacker and antenna?

[@f9zerowinner589]

You don't need any of this equipment all you need to do is know how to program a RAW program and then its like every entry is open and you turned a 300 dollar laptop into a laptop that would of costed you $50,000

[@SecurityFWD]

Ok

[@svporqueno]

Can we get the title of the CODES, book in the background please? 🙂

[@raycarney5941]

Life in Federal Prison for all hackers.

[@yvsonmoura]

Would the Wi-Fi Duck still work if the victim's computer has auto-mount disabled?

[@SecurityFWD]

I don't think so, it would need to mount like plugging in a keyboard.

[@espa_tronc_communsitraka]

in some chinese cheep module like CJMCU, i juste have english keyboard. Is it possible to find some script witch translate the payload wrote on english keyboard to be an payloads wrote on french keyboard?

[@gauravbansal148]

Somehow YT thinks i am smart enough to understand this gibberish.

[@mr.ptolemy8947]

How does one make wifi reach 5 miles?

[@SecurityFWD]

We have a video on the subject here: kzbin.info/www/bejne/fZrQonqjnKufabM

[@donalain69]

Alternatively you could just steal the unguarded laptop..

[@frames695]

thank you thinkpad.

[@Noobmaster1234-f8g]

hacker got rick rolled 3:27 lamao

[@SecurityFWD]

The ultimate hack haha

[@angeloc.265]

Next: tutorial in assembling simple wifi, and its functions and descriptions

[@Wk_e_com]

yo imma troll my teachers with this

[@tqmatvey7010]

that is sick!! but tho you need to portforward from attacker so you can use revere shells, or must be in same network as victim then rubber ducky is just a better tool

[@MrNwn007]

2:57 nothing suspicious,. nothing suspicious

[@alokprakash2017]

Every hacker talk of WiFi but no one talk about hacking pc in 4G network in public. I tried to look for open ports by getting my ip address of android phone and then USB tethering it to my PC but it was taking hell lot of time to scan. Then I exited because I am noob in hacking.

[@Reallich_]

i would do this on my friends just to rick roll them

[@trafferz]

Fascinating. Your meaning in 'temporary access' is that the computer is left in logged in state, correct? The wifi duck doesn't immediately defeat password protection, does it? At least now this gives a better picture of what all those movies are trying to represent when the agent plugs a USB dongle into a target's machine. Thanks!

[@SecurityFWD]

Yes temporary access would normally mean logged in, how ever if the hacker did have the password the duck could enter it.

[@trafferz]

@@SecurityFWD Understood. Thank you!

[@anasqai]

It is clear a Rubber Ducky is a Fake Duck, so This Definitely is a Fake USB.

[@Yorak404]

I love null byte (Your Videos) so yea just subbed here, but but do you know how to get the lazy script to run on the new kali or another script like it?

[@jimbobby1162]

What idiot wouldn’t notice an unknown USB connected to his laptop?

[@margarita8442]

where can I get that antenna ?

[@ash1ss]

or use the rubber ducky to inject key strokes opening a backdoor or just installing malware and running it though cmd but lol whos gonna just get up and leave their computor on and not take their stuff

[@bitopan.]

Worked in lock mode or not ?

[@DarrenStarr]

Would these payloads still get installed even if you had an antivirus software like Bitdefender Total Security? If it doesn't see the attack, what are we paying for?

[@SecurityFWD]

This would still work, it's just like plugging in a keyboard. As long as the hacker doesn't install malware that's been fingerprinted by Bitdefender. Antivirus is there to protect you from install malware buy clicking a bad link and things like that.

[@DarrenStarr]

@@SecurityFWD Thanks for your reply. Thats it! Going to take it offline unless I'm using it! 😁 Very good, clear video by the way, you make it easy even for laymen and the production is nice too. Cheers. Subbed 🙌

[@chromosome24]

8O What script did you use to physically remove the wi-fi duck like that!!

[@smtkumar007]

impractical.

[@GeForceRTXTi]

Duck.FishingLine()

[@XellosMetallium]

my wifi cant get farther than my front house. how the heck you get them a block or 5 miles away?

[@SecurityFWD]

Higher gain antenna and WiFi cards that have higher output. Line of sight can be a huge factor too.

[@kytv9000]

Will the script install stuff without knowing the root password? For most linux distros and user scenarios, a root password prompt would come up and I think that'd be the biggest issue?

[@SecurityFWD]

Depends on how the hacker goes about things, root password could be a roadblock but then you get into privilege escalation.

[@jeoi]

Or Even Worse... RickRoll Injection XD

[@AK47z]

Or I can just throw my botnet server on a usb, plug it into any “victims” pc and with 2 clicks of the mouse I now have full control over that pc anytime it’s online.

[@KeebaAfrica]

do 1st world people actually leave a computer unattended???

[@SecurityFWD]

Yes just depends on the setting. Less likely at a coffee shop but very common in an office or at home.

[@c123bthunderpig]

Amazing, developing tools that let you he a thief, not caring about what the damage can do to an individual. Think I'll rig a USB port to explode , like a dye pack 😀

[@SecurityFWD]

Amazing, wishing for all to be ignorant so they can be easily tricked. I think I'll hope no one knows how this works so no one can defend against it!

[@hritikverma8390]

Hope this did not get Copyright strike.

[@SecurityFWD]

Why would this get a copyright? lol

[@hritikverma8390]

@@SecurityFWD No usually KZbin remove content related to ethical hacking and stuff

[@TheMaxreuben]

Link to the podcast?

[@SecurityFWD]

The podcast is here: securitytools.simplecast.com/

[@TheMaxreuben]

Thanks. Appreciate it.

[@stuna91]

How can you tell if someone did this to your computer?

[@neomatrix3612]

Push "F7"

[@simbahunter]

Your computer is going to start behaving abnormally, check your task manager if power shell is open without you opening it you have bee hacked.

[@Calypso993]

another option could be to put a 3 or 4g mobile modem in the ducky...

[@chiranjeevinaidu3660]

I wonder what happened to the NullByte channel 🤔

[@adamiskandar7845]

why its smoky on 3:19

[@nagasaipurvaz4251]

i always keep the usb ports closed with laptop sleve

[@sihmy9870]

Just gimme those stickers and I'll become a perfect hacker

[@aleksandarstevanovic5854]

Samy Kamkar did this years ago...

[@hyperdeloutz2444]

I pity the poor soul that bothers to hack into my computer!! 😂😂

[@LioncatDevStudio]

Getting hacked by a duck

[@executivezone1]

is there a way to plug into a computer with this device via AUX instead of usb?

[@donalain69]

LOL.. are you planing to sabotage your opponents at the pioneer DJ world championship? 😃

[@executivezone1]

@@donalain69 cute... was thinking of ATM machines at the bank

[@donalain69]

@@executivezone1 hmm.. now that you mention it.. your right. Seen some ATM with audio jack.. but I guess that’s only audio out for earphones.. Guess usb is still a better option if the Hardware case isn’t locked. where I live (in thailand) i see at least 3 ATMs per day with open doors or hardware parts placed next to or behind them... and usually the hardware is just a small pc tower.. with usb.

[@executivezone1]

@@donalain69 worth a shot, which is why i asked ;)

[@donalain69]

@@executivezone1 well.. I guess you won’t post it on KZbin in case it worked, so I probably will never know. But wish you good luck with it.

[@cheajingzing6860]

he could just steel the laptop instead .LOL

[@SecurityFWD]

Perhaps but this sort of attack can be much more dangerous depending on the hacker's goals.

[@BMcC78]

You have organized stickers on your laptop. You must be a hacker. Let me guess, you sign your name with Security+?

[@selami32]

i can do this but i don't have a companion hacker

[@SecurityFWD]

A single person can do it, they would just have to target something like a desktop in an office.

[@DntGames]

Where did you buy the unidirectional antena?

[@blufrog9546]

you can make one yourself

[@lordvalen8133]

Buy some pringles.

[@reastle1307]

i am hear from NULL-byte

[@SecurityFWD]

Good to see you!

[@theeffectoflogic3]

Could you repeat that? I couldn't here you!

[@adropofgoldensun27]

"Wifi can travel up to 5 miles" yet I still get KZbin buffering inside my house 🙂

[@kenyanaddict_official]

Where can I get the tool

[@narmandanail8137]

the probs is when you deal non digitalized mechanism then old school way :D

[@ShivamVerma-sz1ew]

Can i use Esp8266 for this attack

[@VioletMercado292]

CAN I BE HACKED WITHOUT KNOWING??

[@rorozorolol9725]

who leaves their laptop alone?

[@flyerzy]

there is nothing in my pc but virus ! welcome ! lol

[@jerrygeorge1620]

I don't have a alpha network, can I use my own laptop WiFi to access the ducky? Please help me

[@Coniass]

Yes but the Range is Smaller

[@anupdhond]

This is like the equivalent of a hardware trojan.

[@SecurityFWD]

Basically haha

[@j5892000]

So you have to put the usb stick on the computer you are wanting to hack lol

[@MajikCatSecurity]

Yes, you have a non-hacker that works there or poses as a service tech plant the device. It still takes hacking skills to actually use the device once it is connected. Or simply use it as a remote connection to your home server, etc. There are times when a technique like this is preferred or even needed.

[@SecurityFWD]

Congratulations! We responded to your comment on the livestream here: kzbin.info/www/bejne/j4ncqYiEYsqIbaM

[@umarbaig007]

How to put usb into other computer ?

[@SecurityFWD]

Serve them coffee and wait till they use the restroom

[@king_jacob732yt4]

wait null bite has second channel

[@faranahmadk7401]

Kindly upload your PC/Laptop setup! waiting...