samyk/poisontap
View on GitHub ↗ ★ 6,481 JavaScript
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
9 mentions on Hacker News by 8 people: 1 story, 8 comments · first 2016-11-16 · latest 2024-05-07
20082026
-
…then you get all the traffic in preference to other system interfaces despite interface ordering: https://github.com/samyk/poisontap I imagine there is also probably some other prior art. But that's a very well known one. They also claim…
comment by lathiat · 2024-05-07 · in Attackers can decloak routing-based VPNs -
…order list. You can also steal all of a machines traffic by plugging a USB network adapter in: https://github.com/samyk/poisontap Working SSL would prevent all of that auto running a downloaded executable by such a boot chain.
comment by lathiat · 2023-06-01 · in Supply Chain Risk from Gigabyte App Center Backdoor -
…PoisonTap is a particularly good example of how devastating this type of attack can be: https://github.com/samyk/poisontap
comment by Ajedi32 · 2021-07-14 · in Increasing HTTPS Adoption -
…Parts of which did this local scanning and connecting to your internal router management page. https://github.com/samyk/poisontap See also, https://www.theregister.co.uk/2010/01/05/geo_location_steali...
comment by sitkack · 2020-05-20 · in Why Is This Website Port Scanning Me? -
If you have an open browser you can easily get HTTP cookies: https://github.com/samyk/poisontap
comment by Xeanort · 2019-02-21 · in Password Managers: Under the Hood of Secrets Management -
…still vulnerable to injection and interception. Moral of the story: encrypt all the things. [0]: https://github.com/samyk/poisontap#desktop-security
comment by fny · 2016-11-17 · in PoisonTap – Exploits locked computers over USB -
▲ 235
PoisonTap – Exploits locked computers over USBstory by el_duderino · 2016-11-16 · 56 comments
-
Over on his website [0], Samy provides a link to the source: https://github.com/samyk/poisontap [0]: https://samy.pl/poisontap/
comment by ddworken · 2016-11-16 · in PoisonTap, a $5 tool that invades password-protected computers -
https://github.com/samyk/poisontap https://samy.pl/poisontap/ But he has a history of intentionally withholding instructions on how to run it just to avoid script kiddies from using this not for research.
comment by smarx007 · 2016-11-16 · in PoisonTap, a $5 tool that invades password-protected computers