Skip to content

DEF CON 34 talks are here: 354 talks, summarized and searchable.

Browse DEF CON 34

From the Keyboards Through the Walls Got Implant Shells for Yall

Jonathan Fischer

HardwareTalks21 minIntermediateOpen on YouTube ↗

Where

Talks
ShmooCon 2023

Duration

21 min

Demonstrates an open-source keyboard implant that uses mesh radio for remote control, reverse shells, and file exfiltration.

Summary

Jonathan Fischer presents Inject Hide, an open-source implant that sits between a keyboard and a target computer. The talk starts with the baseline features: keystroke logging, live sniffing, keystroke injection, and an insomnia mode that keeps the machine from going idle. Remote management lets an operator push and delete scripts, pull keystroke recordings, and trigger a go-dark mode that wipes the SD card and stops answering commands when detection seems likely.

The main design choice is a mesh radio network, which lets operators extend range with repeaters and reach the command server from a nearby spot. The implant also exposes a second serial port, so a PowerShell session launched through keystroke injection can tunnel a reverse shell back over radio. The speaker shows attaching to and detaching from sessions, then exfiltrating a file that is encoded and compressed before transfer. New in this release are an exfiltration path that writes to the SD card, a parser that turns raw keystroke packets into readable text, and automatic chunking of long injected scripts.

The closing section covers work in progress. Chip shortages forced a pivot to a board that can be implanted, and the team is reworking memory handling so the device still works without an SD card. A planned boot mode would record keystrokes with no radio present. The public repository and documentation are pointed out for anyone who wants to test it. The takeaway for practitioners is that a cheap, keyboard-adjacent device can provide persistent collection and remote control, which makes physical access and USB device monitoring worth reviewing.

Related talks