MATCHspecifies a string or regular expression that may be typed on the keyboard connected to the Key Croc to trigger the payload's execution.
MATCHcommand will be executed when the target types "hello".
MATCHcommand will be executed when the target types either "root" or "admin" or "mubix".
MATCHwill execute when the target types numbers which represent an American ZIP (postal) code.
MATCHpattern will be checked against a continuous stream of keystrokes. For example:
MATCH dallas– correct usage
MATCH ^dallas$– incorrect usage
udisk/languages/us.json) may be used as a
MATCH. Keep in mind, since MATCH expects a regular expression, escaping may be necessary. For example:
MATCH \[CTRL-ALT-DELETE]– correct usage
MATCH [CTRL-ALT-DELETE]– incorrect usage
MATCHcommand in a payload, two important things happen.
/root/udisk/lootwhen entering Arming Mode.
$lootwill become available for use in the payload, containing the pattern which triggered the match.
MATCHis not actually a bash command, rather a Key Croc command which is interpreted by the Payload Framework. As such, typing
MATCHin the Key Croc command prompt will not yield results, and changing the
MATCHvalue live will not have effect unless payloads are reloaded. See the section on interactive payload development for more on