DigiSpark Attiny85 is a light weight and inexpensive option to the Hak5 USB Rubber Ducky. Because it's possible to use it as HID thanks to "DigiKeyboard.h" it can be use as a keyboard to send keystrokes to a computer which can be use for pranking your friends to creating a backdoor in a target system.
I have created this repo for sharing my payloads for DigiSpark Attiny85. All the payloads are tested on Attiny85 and created on Arduino IDE.
For people that are new to this I would suggest visiting Maker.pro for instruction on setting up development environment for Attiny85.
And the YouTube that goes along with the maker.pro article.
-
Support for the Arduino IDE 1.0+ (OSX/Win/Linux)
-
Power via USB or External Source – 5v or 7-35v (12v or less recommended, automatic selection)
-
On-board 500ma 5V Regulator
-
Built-in USB
-
6 I/O Pins (2 are used for USB only if your program actively communicates over USB, otherwise you can use all 6 even if you are programming via USB)
-
8k Flash Memory (about 6k after bootloader)
-
I2C and SPI (vis USI)
-
PWM on 3 pins (more possible with Software PWM)
-
ADC on 4 pins
-
Power LED and Test/Status LED
Wi-Fi password stealer: Grabs Windows saved Wi-Fi passwords and send them to your remote web server
Windows Crasher: Various payloads for crashing windows
UAC Bypass: Different methods to bypass windows UAC
BackDoor: Creates backdoor for later access
KeyLogger: For logging and sending typed keys
Windows Phisher: Phisher for windows credentials
Sam Dumper: Dump windows password files (SAM) and send them to remote location
Payload Dropper: Download and exeute files from internet
Instant Shell: Reverse shell payloads
All the software/scripts/applications/things in this repository are provided as is, without warranty of any kind. Use of these software/scripts/applications/things is entirely at your own risk. Creator of these softwares/scripts/applications/things is not responsible for any direct or indirect damage to your own or defiantly someone else's property resulting from the use of these software/scripts/applications/things. This information is for educational purposes ONLY. Never use malicious software/hardware on a system without consent.