May 24, 2017, 02:49:11 AM
Welcome, Guest. Please login or register.

If you are not part of the solution...You are part of the precipitate.

Author Topic: Kautilya  (Read 2624 times)

Offline 0E 800

  • If something can corrupt you, you're corrupted already.
  • Top Hat Member
  • Elite
  • ********
  • Posts: 961
  • Internets: +154/-0
  • • тнε ιηтεяηεт ιs мү яεcүcℓε-вιη •
Kautilya
« on: July 31, 2014, 05:22:05 PM »
Dont have the time to test or play with it. Please someone write a review...

Kautilya is a toolkit which provides various payloads for a Human Interface Device which may help in breaking in a computer during penetration tests.



https://github.com/samratashok/Kautilya
"He who passes not his days in the realm of dreams is the slave of the days."

Offline R4v3N

  • Administrator
  • Super Elite
  • *****
  • Posts: 3691
  • Internets: +160/-1
  • The googles and the metasploits...
    • Top-Hat-Sec
Re: Kautilya
« Reply #1 on: August 01, 2014, 05:30:42 AM »
Dont have the time to test or play with it. Please someone write a review...

Kautilya is a toolkit which provides various payloads for a Human Interface Device which may help in breaking in a computer during penetration tests.



https://github.com/samratashok/Kautilya

0E do you know anything else about this? From the screenshot it looks like a payload generator?

Offline TAPE

  • Top Hat Member Moderator
  • Elite
  • ********
  • Posts: 1247
  • Internets: +192/-0
Re: Kautilya
« Reply #2 on: August 01, 2014, 08:10:50 AM »
Take all the advice you like and then tell everyone to **** off and do your own thing -- Gitsnik

Offline 0E 800

  • If something can corrupt you, you're corrupted already.
  • Top Hat Member
  • Elite
  • ********
  • Posts: 961
  • Internets: +154/-0
  • • тнε ιηтεяηεт ιs мү яεcүcℓε-вιη •
Re: Kautilya
« Reply #3 on: August 01, 2014, 08:57:59 AM »
Nice find TAPE, thank you for posting the link. I need to save up for a rubber ducky :D


Rubber Ducky compared to Teensie
https://www.youtube.com/watch?v=tJlDbViaF8s
« Last Edit: August 01, 2014, 09:13:28 AM by 0E 800 »
"He who passes not his days in the realm of dreams is the slave of the days."

~ZEPHYR~

  • Guest
Re: Kautilya
« Reply #4 on: August 03, 2014, 08:24:52 AM »
What alternative is there Teensy?

Offline yashar26

  • Top Hat Member
  • Elite
  • ********
  • Posts: 584
  • Internets: +76/-2
  • Sec+, CEH v8, eCPPT Gold, eWAPT
Re: Kautilya
« Reply #5 on: August 03, 2014, 02:36:13 PM »
Excellent find 0E800! thanks, it will certainly be useful!

Offline outofstep

  • Top Hat Member
  • Enthusiast
  • ********
  • Posts: 85
  • Internets: +19/-2
    • Dorkfeast
Re: Kautilya
« Reply #6 on: December 27, 2015, 03:26:42 PM »
i gave this a test while working on payloads for teensy, tried to do one that took creds and emailed them out. didn't seem to work on a win10 system. anyone have luck with this payload generator?

Offline outofstep

  • Top Hat Member
  • Enthusiast
  • ********
  • Posts: 85
  • Internets: +19/-2
    • Dorkfeast
Re: Kautilya
« Reply #7 on: December 29, 2015, 09:31:23 AM »
Update! I was able to get a payload to take win10 login creds then have them emailed to me with success

Offline outofstep

  • Top Hat Member
  • Enthusiast
  • ********
  • Posts: 85
  • Internets: +19/-2
    • Dorkfeast
Re: Kautilya
« Reply #8 on: December 29, 2015, 09:48:39 AM »
On a side note, was talking with the author, he is currently working on a multi payload option for this. Some of the options are still above my skill set, but learning...

Offline 0E 800

  • If something can corrupt you, you're corrupted already.
  • Top Hat Member
  • Elite
  • ********
  • Posts: 961
  • Internets: +154/-0
  • • тнε ιηтεяηεт ιs мү яεcүcℓε-вιη •
Re: Kautilya
« Reply #9 on: December 29, 2015, 09:58:37 AM »
Update! I was able to get a payload to take win10 login creds then have them emailed to me with success

Does this only work with rubber ducky? May you please outline steps?
"He who passes not his days in the realm of dreams is the slave of the days."

Offline outofstep

  • Top Hat Member
  • Enthusiast
  • ********
  • Posts: 85
  • Internets: +19/-2
    • Dorkfeast
Re: Kautilya
« Reply #10 on: December 29, 2015, 10:55:42 AM »
I didn't use ducky, I used teensy 3.2

It's really simple, download kautilya, ardrino 1.6.6, and the ardrino teensy plugin, generate desired payload in kautilya, open payload in ardrino to write to the teensy, plug in and pwn.

Offline outofstep

  • Top Hat Member
  • Enthusiast
  • ********
  • Posts: 85
  • Internets: +19/-2
    • Dorkfeast
Re: Kautilya
« Reply #11 on: December 29, 2015, 12:31:10 PM »
I'll try to do a full how to for it tonite if peeps want one, I haven't tested the other payloads yet though

Offline ch3rn0byl

  • Top Hat Member
  • Experienced
  • ********
  • Posts: 185
  • Internets: +1337/-0
  • Grumpy Old Man with Mounds of Salt
Re: Kautilya
« Reply #12 on: December 29, 2015, 12:48:29 PM »
I'll try to do a full how to for it tonite if peeps want one, I haven't tested the other payloads yet though
Dont ask if we want one, just do it!
The quieter you become, the more you are unlikely to sound stupid.

Offline c0ldg0ld

  • Si Vis Pacem, Para Bellum
  • Global Moderator
  • Elite
  • *****
  • Posts: 524
  • Internets: +34/-0
    • Public Key
Re: Kautilya
« Reply #13 on: December 30, 2015, 09:06:30 AM »
Dang teensy is one of the few arduino I don't have... got a micro, uno, mega, adafruit trinket, gemma, flora, etc etc...

The trinkets can be used as HID maybe I can figure out how to port to that.
rm -rf /bin/laden

Time is an illusion. Lunchtime doubly so.


Public Key

Offline outofstep

  • Top Hat Member
  • Enthusiast
  • ********
  • Posts: 85
  • Internets: +19/-2
    • Dorkfeast
Re: Kautilya
« Reply #14 on: December 30, 2015, 05:21:04 PM »