mosart_keyinjector

Presentation

mosart_keyinjector allows to perform a keystroke injection attack targeting a Mosart Device. It works with a RFStorm Device.

You have to provide a target using the TARGET parameter and you can choose the injection channel thanks to the CHANNEL parameter.

You can enable the SYNC mode if you want to inject your frames synchronously with the Sync packets transmitted by the target dongle.

You can choose the locale in use by providing a value composed of two characters to LOCALE parameter.

This module has the same behaviour than the Enhanced ShockBurst scenarios logitech_encrypted_keystrokes_injection and logitech_unencrypted_keystrokes_injection, described here. As a consequence, you can manipulate the TEXT parameter (if you just want to transmit a simple text), the DUCKYSCRIPT parameter (if you want to perform complex keystrokes injection) and the INTERACTIVE parameter (if you want to interactively inject keystrokes).

Compatible devices

Input parameters

Name

Default value

Possible values

Description

INTERFACE

rfstorm0

rfstormX

Interface to use

TARGET

<Mosart adress>

Address of the target device

CHANNEL

36

<integer>

Injection channel

LOCALE

fr

<language>

Locale in use

SYNC

yes

yes|no

Sync mode enabled

TEXT

<string>

Simple text to inject

DUCKYSCRIPT

<file_path>

DuckyScript-based execution

INTERACTIVE

no

yes|no

Sync mode enabled

Output parameters

This module doesn’t provide any output parameters.

Usage

Basic Usage

If you want to inject a simple text, you can use the TEXT parameter: just provides the text to send.

$ mirage mosart_keyinjector TARGET=F4:BF:1E:86 CHANNEL=36 TEXT=Bonjour
[INFO] Module mosart_keyinjector loaded !
Bonjour[INFO] Mirage process terminated !

If you want to use the DuckyScript langage in order to perform more complicated keystrokes injection, you can use the DUCKY_SCRIPT parameter:

$ mirage mosart_keyinjector TARGET=F4:BF:1E:86 CHANNEL=36 DUCKYSCRIPT=/tmp/duck.ducky
[INFO] Module mosart_keyinjector loaded !
[INFO] Mirage process terminated !

Last but not least, you can also control the target directly by using the INTERACTIVE mode:

$ mirage mosart_keyinjector TARGET=F4:BF:1E:86 CHANNEL=36 INTERACTIVE=yes
[INFO] Module mosart_keyinjector loaded !
[INFO] Injecting:b
[INFO] Injecting:o
[INFO] Injecting:n
[INFO] Injecting:j
[INFO] Injecting:o
[INFO] Injecting:u
[INFO] Injecting:r
[...]