Skip to content

Latest commit

 

History

History
20 lines (16 loc) · 839 Bytes

README.md

File metadata and controls

20 lines (16 loc) · 839 Bytes
Raw

keycroc_demo

Password harvesting and stealthy inject

SUMMARY

This project is a quick, standalone demo of using keycroc to capture a password. Once the user is idle, it uses the password to login and inject a payload.

INSTALLATION

  • Enter arming mode on your keycroc
  • Drop keycroc_demo.txt into the keycroc's payload folder

DEMO STEPS

  1. User uses GUI+l to lock the screen
  2. User types password, then ENTER (keycroc captures password starting at GUI+l until ENTER)
  3. User uses GUI+l to lock screen again, triggering phase 2
  4. Keycroc waits 5 secs
  5. Keycroc logs in with captured password
  6. Keycroc injects payload (opens a terminal and types out a skull ASCII art. Can be easily replaced with another payload)

TESTED ON

  • Kali linux (should work on all linux installations that have a GUI)