His palms are sweaty, C2s up, implants ready…

No ratings

Presented at GrrCON Cyber Security Summit and Hacker Conference 2023 by

Jonathan Fischer

Have you ever bought a new toy, only to discover once you got it home that it fell short of expectations? Well, we have too. It’s time that our tools, and not just their marketing, evolved with the times. This was the driving force behind the development of our new HID exploitation hardware implant project, Injectyll-HIDe. Rather than focusing on a single target like the commercial solutions, we opted to think larger. We developed this implant from the ground up to be customizable, covert, and scalable. Along with our custom C2, our implants communicate over a covert RF mesh network capable of having a thousand endpoints, evading detection. That’s a thousand keyboards relaying, storing, and recording keystrokes! But wait, there’s more! We can also pop shells and exfil data over our mesh network, leaving no record of network traffic to monitor on the target infrastructure. Reviews for this implant range from “oh no, please, this is bad” to “yeah we’ll never detect that” and even sometimes “just yikes” or “#!&%”. Attendees will learn how to create and customize their own implant using our open-source plans and how to deploy our implant anywhere a keyboard can go.