Key Croc
Search…
Getting Started
Beginner Guides
Advanced Usage
Writing Payloads
Tips & Tricks
Product Information
Configuration
Among the files and folders present on the USB flash disk is config.txt. Editing this file with a standard text editor (like Notepad on Windows, TextEdit on Mac, vim/nano on Linux) will let you configure settings such as keymap, WiFi, SSH and DNS.
MANDATORY CONFIGURATIONS
The only mandatory configuration is the language/keymap, which by default is set to US.
1
# Mandatory configurations:
2
# -------------------------
3
4
DUCKY_LANG us
5
# Specifies the keymap with the corresponding two letter json file name from the languages/ directory on the udisk. The default is US for a US English keyboard. Change this depending on the language/keymap of your target.
Copied!
OPTIONAL CONFIGURATIONS
NETWORKING
1
WIFI_SSID [network name]
2
# Specifies the SSID of the WiFi network in which to connect.
3
# Special characters & spaces must be escaped with '\'. EX: My\ Network\!\!
4
5
WIFI_PASS [network password]
6
# Specifies the WPA-PSK passphrase for the WiFi network.
7
# Omit this value for open networks.
8
# Special characters & spaces must be escaped with '\': EX: MyP\@\$\$word\!\!
9
10
SSH [ENABLE, DISABLE]
11
# If enabled, the Key Croc will be accessible by SSH in both attack and arming modes.
12
13
DNS [address 1] [address 2]
14
# Overrides the DNS setting provided by the WiFi network's DHCP server.
Copied!
DEVICE
1
VID [VID_0X<vid hex>]
2
# Overrides the cloned Vendor ID from the attached keyboard
3
4
PID [PID_0X<pid hex>]
5
# Overrides the cloned Product ID from the attached keyboard
6
7
MAN [MAN_label]
8
# Specifies the Manufacturer USB descriptor
9
10
PROD [PROD_label]
11
# Specifies the iProduct USB descriptor
Copied!
PROTECTED ARMING MODE
1
ARMING_PASS [password]
2
# Requires [password] to be typed on the keyboard attached to the Key Croc to enter arming mode.
3
4
ARMING_TIMEOUT [seconds]
5
# (OPTIONAL WITH ARMING_PASS) Defining this adds a timeout to the protected arming mode listener
6
7
# EXAMPLE:
8
# ARMING_PASS hak5croc
9
# ARMING_TIMEOUT 5
10
#
11
# This allows 5 seconds to press the button after typing hak5croc on the attached keyboard
12
# WARNING: MISCONFIGURATIONS BELOW WILL LOCK YOU OUT OF YOUR DEVICE.
Copied!
Copy link