Splinter0

import time
from pwn import log
from random import randint
from fastecdsa.curve import P256
from fastecdsa.point import Point


""" UTIL FUNCTIONS """
def mod_inv(a, m): # For prime number m
    return pow(a, m-2, m)

Splinter0

import os
import time
from pynput.keyboard import Key, Controller

os.system("firefox tinder.com")
keyboard = Controller()

for i in range(100):
    keyboard.press(Key.right)
    keyboard.release(Key.right)

artizirk

NB: This document describles a 'Old-School' way of using Yubikey with SSH

Modern OpenSSH has native support for FIDO Authentication. Its much simpler and should also be more stable with less moving parts. OpenSSH also now has support for signing arbitary files witch can be used as replacement of gnupg. Git also supports signing commits/tags with ssh keys.

Pros of FIDO

• Simpler stack / less moving parts
• Works directly with ssh, ssh-add and ssh-keygen on most computers
• Simpler
• Private key can never leave the FIDO device

Cons of FIDO

fedden

Splinter0

Scheme for wps button attack

Using 2 wireless cards

-1 Setup everything as usual
-2 The victim sees the template that has a "continue" button
    that button has a post request that starts all the process.
    we use this because we can't start the process in other ways
    with only 2 wireless cards