.png)
The “KeySweeper” is a tiny, arduino-powered wireless sniffer that captures data sent by your wireless keyboard to its receiver. That’s right—it’s a keylogger, and it doesn’t have to be plugged into your computer to work.
This post is part of our Evil Week series at Lifehacker, where we look at the dark side of getting things done. Sometimes evil is justified, and other times, knowing evil means knowing how to beat it. Want more? Check out our evil week tag page.
We should note right up front that not every wireless keyboard is vulnerable to this type of sniffing. Bluetooth keyboards, and newer keyboards that use AES between the keyboard and its paired wireless receiver aren’t susceptible.
Even so, back in January (Yes, I’ve been hanging on to this one for a while now, mostly because it’s perfect for Evil Week!) Samy Kamkar pulled a Microsoft wireless keyboard off the shelf at his local Best Buy, and despite a later statement from Microsoft that a: lots of manufacturers are vulnerable to this and b: their keyboards have been updated not to be, it worked like a charm.
Once the firmware is loaded onto the Arduino, you just jam the whole thing into a hollowed-out wall charger so the Arduino gets power, and wait. You can add a GSM chip to send captured account credentials or keystrokes to your phone wirelessly, or you can add a flash storage chip to the mix and grab the captured data the next time you’re in range of the sniffer. KeySweeper can even send SMS alerts for specific keystrokes, and if someone pulls it out of the wall, it looks like it stops working—but actually it runs on an internal battery that’s recharged the next time it’s plugged back in.
You can check out a walkthrough of the KeySweeper’s capabilities in the video above, or hit the link below for everything you’ll need to make your own, including parts and code. As always, use your powers for good—and for good hacking fun.
KeySweeper | via Ars Technica and Hackaday
from Lifehacker http://ift.tt/1Q0kiUJ
0 comments:
Post a Comment