PoisoningCertifiedDefenses
duckhunt
| PoisoningCertifiedDefenses | duckhunt | |
|---|---|---|
| 1 | 10 | |
| 11 | 501 | |
| - | - | |
| 0.0 | 0.0 | |
| almost 3 years ago | 2 months ago | |
| Python | Python | |
| - | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
PoisoningCertifiedDefenses
duckhunt
-
Would disabling HID keyboard driver installation on windows prevent Rubber Ducky/O.MG cable payloads?
The cheapest way is a solution that monitors for high-speed keystroke injection, which is what the rubber ducky is generally used for. One such project is https://github.com/pmsosa/duckhunt (I have no affiliation with this project. It appears to have been updated about 2.5 years ago)
-
Auto Executable Scripts
(Found some code that does it, but I'm not sure if it's the same one that first I saw a while back)
- Is it possible to safely insert a USB into your main computer and prevent any malware from automatically running?
-
FBI: Cyber criminals are mailing out USB drives that install ransomware
If it acts as a keyboard, then it is a fast one and can be prevented. https://github.com/pmsosa/duckhunt
-
gaming usb dongle malware
If you worry about badusb use this https://github.com/pmsosa/duckhunt it blocks keyboard input when detected too fast typing.
-
is this program safe to use in Tails?
Looks like it doesn't even run on Linux. https://github.com/pmsosa/duckhunt#todo
- is this program safe?
-
how to identify a Rubber ducky?
It depends on the sophistication of the attack. You could for example try to detect it based on the manufacturer. That is your best option to prevent the attack by blocking it to act as a keyboard. If spoofed, or you don't have such a measure, you can try to detect it and then stop it. Typically, by focusing on the behavior from the keyboard. E.g., connected and tying without pause, monitoring the actual first commands from the keyboard,.. Have a look at https://github.com/pmsosa/duckhunt for example.
What are some alternatives?
HiddenEye-Legacy - Modern Phishing Tool With Advanced Functionality And Multiple Tunnelling Services [ Android-Support-Available ]
instahack - instahack is a bash & python based script which is officially made to test password strength of Instagram account from termux and kali with bruteforce attack and. it based on tor This tool works on both rooted Android device and Non-rooted Android device. Best Tool For Instagram Bruteforce hacking Tool By Waseem Akram. Made in Bash & python. This is an official repository of instahack
MHDDoS - Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods
branch-protection-bot - A bot tool to disable and re-enable "Include administrators" option in branch protection
adversarial-robustness-toolbox - Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams
usbguard - USBGuard is a software framework for implementing USB device authorization policies (what kind of USB devices are authorized) as well as method of use policies (how a USB device may interact with the system)
MHDDoS - Best DDoS Attack Script Python3, Cyber Attack With 51 Methods [Moved to: https://github.com/MatrixTM/MHDDoS]
hosts - 🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.