Introducing the SharkJack by Hak5

[@id104335409]

The age old question that haunts us every day at the back of our minds: Where does this hole go and can I stick something in it?

[@user-jh8cx4jf7u]

@apples33d3 😂 nice

[@ticktockbam]

@apples33d3 I wonder which hole they tried first.

[@EdnovStormbrewer]

Only if you use protection. accidents happen otherwise.

[@iair-conditiontheoutsideai3076]

I've never looked at a port like that lol

[@ireallyreallyreallylikethisimg]

Bee's nests are an interesting hole to put things into

[@Paper-dust]

How did this get recommended to me?

[@dr.velious5411]

I know why this was recommended to me. Unfortunately, Google has been more invasive than usual lately.

[@bastoscc]

I got a notification for this but I don't mind as I actually wanted to see this

[@RichardServello]

They must have paid

[@DG-qq6gz]

Phones and televisions can listen even when not in use.

[@bastoscc]

@@DG-qq6gz certainly phones but not all televisions. Mine has a microphone in it's remote control and I'm a little concerned that it might be using it but it also can't be using it all the time because it will drain the batteries.

[@londongrace5784]

Imagine making something like this, going on Shark Tank, and having to explain this to the judges.

[@ares8991]

The judge be like "cant we eat this?"

[@r2dude200]

@@ares8991 do you have any samples for us?

[@rickbarajas6823]

I already did it

[@Shacharath]

Imagine dragons

[@Gspec5]

Kevin O'leary: "but Where's the Moneeeyy"?

[@oswaldjh]

So you go around plugging this thing in and not only do you see if the port is active, it sends the data it sees to China.

[@ibeenazz]

China panda will love it

[@johnzheng1424]

U right U right :( god damn data stealers

[@robertlawrence9000]

😂

[@boomwithpeter623]

Americans are shaking

[@cabe8606]

I mean atleast most of it will get censored anyways.

[@zaneoblaneo7624]

I had a really similar idea a while back. But the smallest thing I could come up used a raspberry pi 3b, hosted a double NATted WiFi network, and only exposed it's ssh interface over a wifi network that it hosted. I'm glad to see a more professional take on a similar idea.

[@thatjokerperson7062]

Me: *plugs it in* Correctional officer: ....

[@chrisescourse6549]

Lol same

[@JPLToyExperience]

How in the world did I get here from watching ancient aliens

[@hlonghi]

I got here from a video about beer fermentation so, who knows what KZbin algorithms are doing lmao

[@fatbatman7291]

Jewtube

[@Talia.777]

🤣🤣🤣😹😁😁😂

[@DarkIzo]

every single outlet is tilted makes me tilted

[@AlexsaurusRex]

I think you're on to something. I'm gonna say that all day and see if it catches on. I'm so tilted 😤

[@robertlawrence9000]

Hung over?

[@cepyaditya]

Me plugging this into school library lan port. *Hackerman 😎

[@boiboiboi1419]

The school already know, as u cross the bandwidth quota they’ll catch u

[@r3dcl0udzz20]

More like "skid man"

[@benexe1123]

Cahya Aditya Permana yeah, the school have hundreds of these ports in the walls everywhere.

[@user-nq3xi4wm2k]

boiboiboi I dosed my school with a KZbin video and wasn’t caught

[@jakeaber432]

@@user-nq3xi4wm2k how?

[@TechSpertiseTv]

"Take a byte of the network" nice one Darren! -TheGlitchKing

[@Major_Thorn]

it made me laugh

[@SolarizDe]

Would love to see more details, cool thing but to many questions: - how does one connect to it, integrated AP, BT - POE Support? - if no POE, internal battery? How long does it last? - how to get payload on it? - how long is the Boot time? - LLDP/CDP capable? - 10/100/1000 HD/FD ? EU Distributor? more info please, definitly interested in getting some.

[@noahluppe]

definitly internal battery (USB-C charge); looks like internal WiFi to access and control it

[@mutwakilsuliman3867]

yes iam waiting to find out

[@krusic22]

It uses WiFi (300Mbps n), No POE, Small 50mAh battery, Via the shell or webui, N/A, N/A, Fast ethernet, so only 100Mbps.

[@ashvinbhuttoo]

would have been nice if this thing could help me create a virtual adapter on my android device and tunnel it via its little wifi, i could then access the network directly on my phone and use existing android pen testing tools..

[@pcislocked]

@@ashvinbhuttoo use a otg ethernet adapter

[@DimusTech]

Wow! that looks like an awesome device, pretty much sounds like you could get in a place, connect it somewhere hard to find, and later connect to it with shell and own the whole place!

[@Crazyfayze]

Viper drive by Atlas, it's state of the art.

[@darkamyntas3820]

Lol

[@Cultwave]

Hahahaha

[@ethangilbertmedia]

Hey that's my band name, nobody's allowed to use the words "viper" or "drive" anymore as we have them copyrighted, joking of course 😂

[@ripsquid873]

Wtf are you talking about ?

[@ethangilbertmedia]

xPandis the name “viper drive” it’s the name of my band...

[@obelixer9751]

To keep dust out of the socket and has some additional neat light effects.

[@M.J.C.W.]

Awe you missed the chance for the He-Man reference with “Lan Shark.”

[@Hebdomad7]

This is what your own rebranding stickers are for.

[@ChristopherGaul]

I'm pretty sure that's already trademarked.

[@ueberRegenbogen]

Or an SNL reference, depending how old we are.

[@mcbrideskoi]

Or Jimmy buffet beer 😂

[@St0ner1995]

I'd love to see PoE support

[@Cunfuu]

first I thought its was PoE then I heard Type-C charging

[@ueberRegenbogen]

And not all PoE works the same way. :(

[@RS-of1om]

Yeah if it can switch make n model will save time

[@batica81]

I think you nailed it with this one! Looks super useful and portable!

[@khalidmkhan]

Looks like someone took a bite out of the case budget! Lol Can't wait to get one. Thanks for uploading.

[@phischtv4497]

I asked earlier for a tiny sniffing device for unused ethernetjacks in the wild. nice. :) But I would like to see what's inside first, and some real-life demos. Video please? :)

[@OppositionTyranny]

Yeah I tried searching but it seems like it's a new thing, I found nothing.

[@phischtv4497]

@@OppositionTyranny yeah, I tried to use some mini-APs for that task, but the formfactor really is a prob. I wanna see a teardown, if they use some kind of ARM-M8 SoC...

[@Frumpyjones2]

IF THEY COULD PLAY THE MUSIC A LITTLE LOUDER SO I CAN'T HEAR WHAT HE'S SAYING AT ALL... That'd be great....

[@maxstr]

The Dark Knight I just bought one! I'm gonna try using it at work.

[@RidinWithMyLocsOn]

@@maxstr So, 8 months later, what happened? They caught you and sent you to Guantanamo Bay or something?

[@Scrumplex]

The important question is: Can it run Arch?

[@ilovemesomejess]

I keep getting caught, every time I go to plug it in I loudly make the Da Daa sounds from Jaws.

[@999metalhead7]

Same! Only I break out with Baaaaby shark, do do, do doo do do!

[@serraramayfield9230]

Chris Nichols NUU

[@wildhunt2235]

Ha really I got to get this thing 🤣

[@Lizlodude]

Thought this was going to be the network adapter spoof attack, phew. This is actually cool, wonder if it has a passive mode, would be great for non-malicious troubleshooting too.

[@gregd6893]

*Hacker voice ...I'm in

[@5k337minecraft]

What's a hacker voice?

[@danielthekidd1460]

It's a freakin shark with a laser on its head.

[@MissingPersonsMysteries]

Do you have an affiliate program?

[@jameshutchison]

I’ve no clue what this does, or even what it is, but it has a flashing coloured light and can fit on my keyring. I want one NOW!!

[@bengregoire1164]

Zomg you just popped into my feed. I miss hak5! My technolust has suffered greatly in your absence though... I even bought an iPhone.....

[@k6usy]

What happens when the clip on the RJ-45 breaks...

[@user-md3is4dq2d]

Lmao, you could probably replace it

[@Willy_Tepes]

That is why they invented duct tape.

[@rachelslur8729]

Super glue to the rescue.

[@lmaoroflcopter]

It's wired to the board. Buy a network cable or terminate your own. Cut the wires down to size. Solder into place once again.

[@benefactionhindrance]

It turns into micro plastics and kills marine life

[@thekingofpotatoes1932]

You know it's 2019 when the male connector comes with RGB

[@RaisinBarXZ550]

Why did i get a notification for this when I didn’t even subscribe?

[@brodykent876]

Same. Let's ask susan

[@Naeidea]

You've been Sharkjacked. Check your network ports.

[@Bakashi]

Your network has been compromised by Shark Jack

[@nestion-music1820]

I was watching Edward Snowden " How Your Cell Phone Spies on You " on my pc with my phone next to me. When I finished watching it I got a KZbin recommendation on my phone of this lol.

[@michaelgoldberg2434]

Same... Joe Rogan. And it was in my notification header.

[@stephenpena7813]

I mean if you have everything in the same account on all devices that's why lol now if it tells you that on a device you've never used before.... 0_0

[@PurplProto]

Spent the first 30 seconds trying to skip the ad before I realised it was the actual video

[@wildfirephoenix2262]

"take a bite out of the network" lol 😂😂😂😂😂

[@TheShlongman]

Wildfire Phoenix take a byte

[@OjaswiOm-y2u]

How are people not watching you guys??How and where do you find these things?? Absolute Genius!

[@xanosdarkpaw1]

...They make them. And sell them.

[@logismos9844]

You lost me at “cloud”.

[@johnbuscher]

@Jumpy Cat It took me longer than I care to admit to realize the joke.

[@Gspec5]

I plugged this into my cigarette lighter and it took a bite outta my transmission

[@kristanrodrigues7705]

@Hak5 Just ordered one. Have been waiting for months since the tease came out

[@danr2652]

Most people commenting here have no idea what the SharkJack does. they just clicked because they saw HAK on the title.

[@bergermany2012]

I am Intrigue , what does it do please

[@Goodfella0982]

@@bergermany2012 Same here, a 1 min video didn't really explain much

[@MichaelsPwner]

I clicked because I hoped it had something to do with the game shark of old.. Tony hawk pro skater was so fun back then.

[@danr2652]

@@bergermany2012 It is used to pentest (check if network can be penetrated) a targeted network and gather information about it and its vulnerabilities making it easy for the attacker to do whatever he/she wants with the target.

[@MMPablo]

Jokes aside, yes

[@Raptor51693]

You know what would make this cooler? POE

[@Raptor51693]

Joe Dirt best not to have the option then

[@DarrenKitchen]

What would POE add other than the ability to charge the battery from a port? You'd still need a battery for the vast majority of ports which aren't POE - and as is it's compatible with ports POE and non-POE. I don't understand the obsession with POE - it's a cool technology but in this application it doesn't add a lot of value, rather just increases and cost and makes the devices a lot bigger.

[@tin2001]

Almost all places big and rich enough to have random open ports on a POE switch are also big and rich enough to have an IT department who monitor for sudden new devices acquiring IP addresses or drawing power off POE. Not only would POE be fairly useless, but it would also add another method of being caught.

[@lmaoroflcopter]

So this has been awesome, been using mine regularly on jobs after finding out how to recover it after derping it right up. :) Have a few payloads in the wings but not sure how to package them for sharing as they all require installations using opkg.

[@spicypotatoes301]

Yeah imma need to plug one of these in at my school

[@user-md3is4dq2d]

Not feeling this name

[@ssjaken]

Bruhhh. Hak5 is still around. I miss them. Glad this was suggested

[@leonardodepinto7912]

Me: plugs It in Sys admin want know your position

[@DDBAA24]

What goes on inside of Shark Jack ? There was a sale in the Hak Shop I should have bought it then , but I couldn't find any videos about it on any platform . This video just repeats whats in the ad . Its more compact then the bash bunny just a different attack vector , cool little gadget is there a SoC in there ?

[@DoughBoy2024]

What you need to take a bite out of...... Is the volume of the background music

[@RS-of1om]

Darth Vader Heavy Breathing sounds !

[@ZombieWolfe]

That's actually a really sweet tool for network admins.

[@Shahzad-Khan]

RGB... I’m sold

[@drewswizzle4413]

This land in anyone elses phone notifications without know wtf this is or why its there?

[@gc.s]

Drew Swizzle yeah same here

[@jonnyjoanknecht5164]

Yep same here completely useless and I'm an electrician

[@sicks6six]

Plugs into the chip implant in my head for downloading memory and uploading fake memory. It's old now. CIA been doing that for years. Tom Cruise is years behind reality.

[@moccagringo2311]

@@sicks6six hey, that was Johnny mnemonic... Back in the 1994..

[@kintokisa]

Yeee

[@NewMateo]

Can someone explain what this is. They said it delivers payloads so is it to used to deliver malicious software on networks?

[@N00bB1scu1tGaming]

The problem with compsec is terminology. Every device is vulnerable. Payloads are essentially snippets of code that exploit these vulnerabilities. What defines a payload as malicious or not is intent. In this case, you are doing what is called penetration testing. This device is an oversimplified method white hat hackers use to secure networks and devices, by finding out if everything was patched up the best way it can possibly be. That doesn't mean this device will cause you to have your email password stolen, your social hijacked, or your credit maxed. It simply checks if the network is secure. That said, a tool like this can also be counter used by someone to find a vulnerability in a network for further exploitation, which IS malicious. Sorry for the long winded explanation, but the media has a bad habit of associating the term "hack" or "payload" with "you are going to lose all your personal information! Hide yo kids, hide you wife!!!1!" Some examples of hacking that is not malicious to you as a user as long as YOU are the one performing these actions: Video game console hacking. Rooting your Android device. Jailbreaking your phone. All of these things generally have one thing in common: You gain control over YOUR device by exploiting security flaws (or in this case finding and fixing them). P.S. The average user will never need this, it wouldn't benefit them, and you have no assurance it isn't sending information to some unknown location. Also in some states in the US, a device like this is illegal without proper certifications or licences (they would treat it like having a lock picking kit).

[@DerpyNoodIe]

@@N00bB1scu1tGaming So I can't hook this thing up at a school and watch the school network crash?

[@RobeonMew]

bit what does it DO?

[@TrynaBeCray]

if you're testing power sockets, using a fork works as well, if you survive it means its not working

[@lmaoroflcopter]

Jabbed a fork in. Seems like electricity chose to short between live and ground over prong tip 1 and 2, no interest in grounding through me but it tripped the breaker, I’m still alive. Assumption: socket is off.

[@PeterPetrakis]

Be nice if it had led coding like a GFI outlet tester. Just tell me the minimum sustained throughput. If I need more info, then I'll bring out the phone.

[@MissingPersonsMysteries]

I was thinking the same thing myself.

[@sharkesaresexy6849]

That’s in the premium version available in 18 months

[@TheUnderMind]

*Wow.*

[@707Tyree]

Could this be used for illegal purposes at a restaurant?

[@tzq33tdq]

I feel like a user serviceable battery would be a big plus if it was added to this. I'm still unsure if I will purchase it

[@JOELwindows7]

This is your daily dose of Recommendation What is thing does? KZbin! What is this thing? Intresting..

[@pathfinderproject9381]

Ordered one. This will be so much fun

[@AwesomesMan]

What does it do tho?

[@userou-ig1ze]

the music was a bit low volume. It should be WAY LOUDER PLEASE!!!

[@Grufian1]

Yah! Yah! Yah! I never want to pay attention to the listed subject matter of a clip. I only click on things so that my audiologist will have something to operate on!

[@ShadowGPSDFX]

How many times can you show uncapping it and plugging it in?? How about how it actually works and why was this recommended to me? KZbin got paid off.

[@Go.el_Hadam]

Glad this popped up in my recommendations 😊

[@JeremyPrattigmp2u]

Properly configured NAC like ISE or Fortinac wouldn't allow this to do jack on the network much less take a bite out of it

[@hattrickster33]

Better yet, put an official looking notice or sticker saying DO NOT REMOVE No one will dare touch it because it is suddenly a critical piece of hardware that no one knows what it does.

[@alex092892]

Are you able to use the internet from your personal device once connected?

[@datboirb]

Prob not. Its marketed towards IT guys who need quick fixes and stats

[@michaelewen5498]

For clarification: Can this replace a Fluke linkrunner?

[@sygad1]

trust your technolust, nice reference

[@Anthony-cn8ll]

Curious what I'd find if I plugged this into all the unused ports at my work, but I'm definitely not gonna.

[@teleprototype]

802.1X and sticky Mac: Am I a joke to you?

[@ChrisVenture]

Why did I get an alert push notification for this? this doesn't line up with my viewing habits even in the slightest...

[@TrogansVods]

Suggestion for a sniffer, earrings / studs, the tech is getting small enough so they can probably be done

[@lathah8160]

I gave a like just cause of the outrun background music.

[@1stoptech]

I don't know what I just witnessed but it looks mcGyver badass!

[@AndersonDotPro]

Is 5GHZ expansion unit available for Pineapple yet?

[@teechmehowtohack3507]

but the *cloud c2* only works when you're on the same wifi?

[@wuddadid]

Is nobody else going to comment on the choice or volume of the music? Could have been just my speaker but I couldn't hear a word you said.

[@b0bjedump]

why would you put a picture of your keys on the internet ? You go to enough CON's, you should know better :)

[@DarrenKitchen]

Those are keys to locks I no longer use. Trust me, I know better - but still gotta illustrate the portability point :)

[@b0bjedump]

@@DarrenKitchen fair enough :)

[@MRGUSTAVOCHICKENFRING]

So what can happen if you put your keys video?

[@b0bjedump]

@@MRGUSTAVOCHICKENFRING I highly advise you follow lockpickinglawyer, bosnianbill and deviantollam.

[@mattikaki]

Have you got this for Token Ring?

[@7119kyle]

So we got the USB killer that's for "stress testing" and totally not for griefing... And now we got the shark jack... for ofcourse "stress testing" and totally not for corperate espionage... Because of course you would need a portable payload device to inject potentially malicious code into a secure network from any open RJ45 connector....

[@7119kyle]

God forbid some asshat from jacking into a hospital

[@trentbergin3776]

I’m guessing this is just assuming dhcp will give it an address and max filtering is not on

[@birdman-]

I watched it, I read the description from the website, I still could not understand its use. Could somebody explain it to me in english please?

[@theshark84724]

Want... BUT, what happens when the battery inside this device dies? Is it a standard lithium battery of some kind? It doesn’t mention that in the video or on the website. I’m not gonna wanna have to buy another Shark Jack when the battery stops holding a charge in a year or whatever.

[@DarrenKitchen]

It's a standard 401020 lithium battery

[@MalleusSemperVictor]

Did you guys change the Supervisor password on that RICOH printer?

[@lmaoroflcopter]

Shhhh... That's my favourite go to. In as sup Change admin Head to ldap config Change to me Snarf the creds Then as you log into the network, ponder the question why every single corporate place runs printer service accounts as bloody domain admin!

[@MalleusSemperVictor]

@@lmaoroflcopter If you can get your hands on the hard drive the admin credentials are in there. You just have to open some of the files in a hex editor. I've seen their techs do it but I don't think it's a sanctioned Ricoh activity but it's cheaper than replacing the NVRAM chips if someone forgets the password.

[@lmaoroflcopter]

@@MalleusSemperVictor nice to know. I don't generally get the opportunity to take apart a printer on my jobs but worth knowing none the less.

[@dr.zoidberg4313]

Advanced recon, exfiltration, attack and automation payloads? Is this some sort of smart person thing?

[@763jtc]

Its curiosity, ill be in a random plant facility an see a jack in the wall an be curious about it. What all is on the network, does it have internet?

[@jenevivelancia3012]

@Boe Dillard this is sad...

[@chesshooligan1282]

I might buy one of these things if I knew what it does.

[@Ducky69247]

Amazing how watching the video and performing a Google search combined still don't explain what this is.

[@johnames6430]

@@Ducky69247 yes absolute fail, since I'm already familiar with networking I know what it is but they did a horrible job explaining it.

[@eddie4886]

@@johnames6430 what is it. Please i still don't know

[@johnames6430]

@@eddie4886 look up wireshark

[@jacobtherobertson]

Recommended to me. But my feedback is if I want to use this at work but I'm not allowed to have a phone at work then I cant use this

[@lukogs]

I wish they'd be like receivers (like dongles). You know, for desktop, to save usb space.

[@mtuntelder]

Gokul S you meant ... WiFi?

[@lukogs]

@@mtuntelder Yes

[@random-ig6tp]

Doesnt mac filtering make this ineffective?

[@Rick-jf2ig]

Presumably it works with computer Ethernet ports as well, that'd be interesting

[@zarrik5018]

*Viper Drive, State of the art technology!!*

[@rationalpickle]

Pretty cool, but can it play Wonderwall?

[@internziko]

This looks like something from Mr Robot

[@stephenpena7813]

He's used something similar and he's mentioned small details on pentesting. That show is a more accurate look at hacking with the occasional stray from reality lol

[@joseherrera5264]

*Jaws theme plays in the background*

[@franciscoreyes9961]

Funcionará para un ipad?

[@jameszanghi3564]

Someone explain to me wtf that does

[@mikeavila6921]

Looks like it gathers network information. Maybe when you plug it in, it act like a desktop and send commands over the network, gathering data. You could use that info to do other attacks at a later time. Real hacker hours.

[@N00bB1scu1tGaming]

It is a simplified solution to find vulnerabilities on a network so you can secure it. Useful for IT, Average consumer wouldn't need it. Can also be counter used by aholes to find an entry point to hack someone if used illegally.

[@jameszanghi3564]

Thank you guys!

[@RenaultSportLebanon]

😂 The pop music...terrible ad...I’m sure the budget was bottom line. Nice Jeans 👖! did it come with the jacket 🧥?

[@parascraps5796]

Does it uses an App to talk to the phone? How does it communicate with the phone? Over bluetooth or over the internet? Can it be used without cloud c2?

[@vasiliska6077]

If you watch the video better you will realize it shows a link /dashboard I guess it's over Ethernet

[@RomanLeBg]

in Wifi with a web browser

[@lmaoroflcopter]

@@RomanLeBg nope. It's cloudc2. Relies on being able to get out to the internet over the wired connection. You configure your Payload ahead of time to do what you need or... You go in over the very same network interface it's plugged into the wall with, but yes. I use mine without cloudc2

[@RomanLeBg]

@@lmaoroflcopter Its useless if you need to configure it with internet before you plug it i'm 100% sure it create an AP for you like the "wifi jammer" with an esp8266, so you can scan the devices, see if you got an IP etc

[@lmaoroflcopter]

@@RomanLeBg interesting. Because I own one, I know it doesn't spawn an AP, and have been using it for a week or two, I've found mine exceedingly useful thus far. How do you know if a scan is complete? LED changes colour. How do you know if you get an IP? LED flashes out the last octet and you count.

[@MarkAtwood0430]

"I'm in."

[@dtesta]

What's the hardware specs? Raspberry Pi inside? Thanks.

[@fatehw]

What is this? Can somebody explain in layman's terms?

[@jenevivelancia3012]

It's a network interrogation device. Anyone who needs one knows how to build one, these are for wannabe penetration testers and roided script kiddies.

[@PASTRAMIKick]

@@jenevivelancia3012 I got some good knowledge on microcontrollers and decent on networking, how do you make one? Do you have any references I could check out

[@johnbuscher]

@@jenevivelancia3012 This feels like a tool someone uses without knowing the background behind it, like a person hammering a nail into wood but not learning about physics. Is it wrong? In a way, you should really know what you're doing with either tool, but you can get more people to be doing stuff by providing easily accessible tools.

[@jenevivelancia3012]

@@PASTRAMIKick we build ours in-house, usually hiding the controller behind a false wall plate. I've seen plans online before but not recently and not in this form factor. I would wager that the makers hub at your state University would have a schematic or be able to help you find/design one.

[@arvsep]

Uh... KZbin... just why was this recommended to me?