USBKeylogger is a hardware backdoor for near-source penetration testing and is a sub-project of the ANT Project .

V2 version of https://oshwhub.com/PushEAX/USBKeylogger

The CH9350 chip used in the V1 version is too expensive and has bugs that affect its use.

The V2 version uses ESP8266 to implement USB Soft Host and CH552 to implement USB Device.

Significant cost reduction and better stability.

quick start

Burn firmware:

Both CH552G and ESP8266 need to burn firmware.

CH552G can be burned directly through the USB interface of USBKeylogger.

Turn Pin 1 of the 2Pin switch on the PCB to ON, which is the burning mode.

Plug it into the computer and use WCHISPTool to flash the CH554KEY.hex in the attachment.

ESP8266 needs to be burned independently for the time being. Use the burning socket to burn the esp8266.bin in the attachment.

After burning, solder it to the motherboard.

Instructions:

Connect the USBKeylogger to the USB interface of the computer, and then connect the keyboard to the USBKeylogger.

Keyboard input content will be recorded to the 4MB Flash inside USBKeylogger.

USBKeylogger will turn on the hotspot for 5 seconds every minute.

Use your mobile phone to continuously scan nearby Wi-Fi. If a logger appears, it is a hotspot for USBKeylogger.

The default SSID is logger and the password is 12345678

After connecting to the Wi-Fi hotspot, the hotspot will always be on until the client is disconnected.

Notice:

The firmware is still in an early version and has a series of unfinished features, including:

1. The recorded keystroke content will be repeated.
2. The case of keystrokes cannot be recorded at the moment.
3. There is a conflict between Wi-Fi function and USB Host. Therefore Wi-Fi is designed to be on for 5 seconds every minute. If there is no client connection within 5 seconds, it will automatically close.
4. Not compatible with keyboards with built-in Hub.

The first two problems should be fixed in the next version.

But the third problem is that since the Wi-Fi driver of ESP8266 is not open source, the conflict with USB Host cannot be solved.

It took half a month to adjust it but it didn’t come out. I really overestimated myself. For the time being, this method of opening hotspots for a short period of time can only be used to solve the problem.

appendix:

CH554KEY.hex is the firmware of CH554 and is also compatible with CH552

esp8266.hex is the firmware of ESP8266. Use ESP Flash Download Tool to burn. The parameters are, FLASH rate 80mhz, mode QIO, size 4MB.