TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Black Hills InfoSec

Executing Keyboard Injection Attacks

BHIS · 2020-03-04 · Read original ↗

ATT&CK techniques detected

5 predictions
T1059.001PowerShell
99%
“s ) to inject payload note : knowing the mac address is not required to pull off this attack. all that is required is the target key and that the type has a valid entry, logitech hid, microsoft hid, etc. ( an empty field or ‘ unknown ’ will not work. ) success!!! cloud based powe…”
T1056.001Keylogging
99%
“executing keyboard injection attacks executing keyboard injection attacks ray felch / / preface : following the work of the bastille research group ( see : https : / / github. com / bastilleresearch / mousejack ), i was interested in knowing if these ( keyboard injection ) vulner…”
T1056.001Keylogging
97%
“keyboards and mice in the wild, and this often overlooked attack vector is one that needs to be taken seriously. most users might think, “ oh, it ’ s just a keyboard … it ’ s just a mouse … what harm can they cause? ” the fact is, a keystroke injection that simply displays “ hell…”
T1091Replication Through Removable Media
92%
“key and clicking ‘ r ’ to open the run window - string notepad. exe obviously types notepad. exe in the run window, opening notepad. - string hello world! gets typed into the newly open notepad page note : although some delays may be required to ensure reliable operation when usi…”
T1056.001Keylogging
50%
“attack scenario can be accomplished with a fairly inexpensive radio dongle, a tiny script, and from a distance of up to 100 meters away! i have outlined my process below. hardware : crazy radio pa dongle keyboard : logitech k400r fcc id : jnzyr0019 fortunately for this project, t…”

Summary

Ray Felch // Preface: Following the work of the Bastille Research Group (See: https://github.com/BastilleResearch/mousejack), I was interested in knowing if these (keyboard injection) vulnerabilities were still valid. To my surprise, […]

The post Executing Keyboard Injection Attacks appeared first on Black Hills Information Security, Inc..