I'm looking for a USB-sized board to build a USB exploitation tool.
I'm looking to build something similar to a Bash Bunny or a Rubber Ducky.
Requirements:
- is a pre-built board (prefered) or chip
- able to run a Linux OS (Ubuntu or Kali)
- has a USB male head and a micro-SD slot (for swapping payloads)
- WiFi with Monitor mode
- Bluetooth
- is relatively cheap (10-30 USD maybe)
I'd like to make this work with both "plug-and-go" and persistent logging. Having a lot of IO pins besides for the USB & SD card (like the Raspberry Pi Compute Module) can make it unnecessarily complex and expensive.
Of course, it being a pre-built board where I just have to solder on a few IO pins makes it easier, but a simple and cheap processing chip is also OK.
The purpose for making this is to make it a multi-purpose tool, capable of exfiltrating data, log data persistently, sitting and gathering data about WiFi and Bluetooth devices walking around, plug-inject-go jobs, etc.
The Rubber Ducky isn't multi-purposed enough and the Bash Bunny is rather expensive. I've looked around for a few USBs and boards but have yet to found something good.
Example uses:
- Plug the USB, wait a few seconds, unplug and leave with exfiltrated data (classic rubber ducky stuff)
- Plug, inject backdoors and stuff, unplug, come back later to use the injected code
- Plug, persistently log data (eg keyboard strokes, data streams, etc), return to unplug, leave with an SD card full of logged data
- Plug, use a phone charger or PC's USB port just for power, monitor WiFi and Bluetooth in the area and log that into the USB.
I do realize that sounds like a lot to ask for of something 10-30 USD but I'm mainly looking for something that can do basic processing with USB, micro SD, WiFi and Bluetooth.
