@karmanyaahm – Hack Club Scrapbook

Tue, Mar 21

Custom Ampli-Tie Day 2 - Step 2,3 1. Sizing and learning how to tie a tie 2. Placement tests (fewest lights that'll look decent) - 13 LEDs every 3 cm apart was optimal 3. Harvest Flora NeoPixels from an old non-functional project and then spend foreverrrrrr cleaning them (removing the superglued thread) 4. Ordered microphone and ribbon cable

https://scrapbook-into-the-redwoods.s3.amazonaws.com/866e3efa-a6e0-43f0-8067-1fd3f8905cb1-pxl_20230321_032850659.jpg

https://scrapbook-into-the-redwoods.s3.amazonaws.com/53e3177a-81c9-4d32-9997-b48bb373dac7-pxl_20230321_055900287.mp.jpg

Mon, Mar 20

Custom Ampli-Tie Day 1 - Step 1 Power consumption testing of 16 Neopixels (and the start of my real life engineering notebook, thanks #vrc :/)

https://scrapbook-into-the-redwoods.s3.amazonaws.com/4c277587-36a9-4efb-801a-5efe3131a1cd-img_20230319_211837.jpg

https://scrapbook-into-the-redwoods.s3.amazonaws.com/286cbc4f-ef35-4cd4-960f-af698afcfa7c-pxl_20230319_020122386.jpg

Sat, Mar 11

#frc today, big robotics week

https://cloud-l0dylag3g-hack-club-bot.vercel.app/0img_20230310_211021.jpg

Sun, Feb 26

My ntfy change got merged! docs.ntfy.sh/releases/?h=releases#ntfy-server-v210 github.com/binwiederhier/ntfy/pull/633/commits

https://cloud-bh60plnrx-hack-club-bot.vercel.app/0screenshot_20230226-034613.png

Sun, Feb 26

:winter-hardware-wonderland: #hardware-party Day 12 building a custom USB rubber ducky: Edited a (draft) image and presented on the :winter-hardware-wonderland: 🚢 :emergency-meeting:

https://cloud-4xyd7o00l-hack-club-bot.vercel.app/0oreo_in.png

Sun, Feb 26

:winter-hardware-wonderland: #hardware-party Day 12 building a custom USB rubber ducky: Edited a (draft) image and presented on the :winter-hardware-wonderland: 🚢 :emergency-meeting:

https://cloud-b22yb93vw-hack-club-bot.vercel.app/0pxl_20230224_215436580.jpg

Sat, Feb 25

:winter-hardware-wonderland: #hardware-party Day 11 building a custom USB rubber ducky: I shot the wallpaper image I will put on people's computers using my rubber ducky and assembled and soldered most of them. Huge thanks to @Jaxzog and my other friends who helped set up this set (it took like 4 hours) So close! I just need to finish my informational pamphlet, finalize the mac code, and edit the photo. (I'm in the epoch hoodie w/ the soldering iron (yes, that's a cage nut tool))

https://cloud-cev03jjwy-hack-club-bot.vercel.app/0image.png

https://cloud-i8twryazz-hack-club-bot.vercel.app/0image.png

Fri, Feb 24

:winter-hardware-wonderland: #hardware-party Day 10 building a custom USB rubber ducky: Finally, assembly and soldering 👏. The resin cases are nearly indistinguishable from molded plastic, I'm impressed. The good batches also fit like a(n expensive, high-quality) glove. We also set the set for the wallpaper photoshoot at school. Don't have a trench coat, but I'll do my best black hat imitation tomorrow. 🎩 Finalizing both tomorrow.

https://cloud-ptjwe89jr-hack-club-bot.vercel.app/0img_20230223_234151.jpg

https://cloud-5mc5ku8sw-hack-club-bot.vercel.app/0pxl_20230223_212709415.jpg

Thu, Feb 23

:winter-hardware-wonderland: #hardware-party Day 9 pt 2 (lost count) building a custom USB rubber ducky: I don't know how Hak5 does their thing, but I got the full fingerprint from Windows and frequency charted the bRequest values, and there aren't more than 2 Configuration params (8 and 9). Maybe I was looking at the wrong value, or parsing it wrong, but I'll just stick with my old working method.

https://cloud-mlloujztk-hack-club-bot.vercel.app/0image.png

Wed, Feb 22

:winter-hardware-wonderland: #hardware-party Day 9 building a custom USB rubber ducky: Trying longer fingerprints to copy HAK5's number of configuration descriptor-based detection, and I realized I'm dum dum The setup transaction wasn't just ~250 bytes, I was using a char-based counter, which must've been wrapping. Oh, C.

https://cloud-6t68mvbn3-hack-club-bot.vercel.app/0image.png

Wed, Feb 22

:winter-hardware-wonderland: #hardware-party Day 8 building a custom USB rubber ducky: Not much material progress today, but me and @Jaxzog brainstormed ideas for the image to set the wallpaper to. I also got started w/ an instruction manual/explanation for if someone overreacts to being pranked.

https://cloud-9wasq8bzo-hack-club-bot.vercel.app/0image.png

Tue, Feb 21

:winter-hardware-wonderland: #hardware-party Day 7 building a custom USB rubber ducky: @KaiZheng-U049N5Y0WM9 shipped my cases today ❤️!!! (Yes also the UPS people spelled my name wrong) I asked @reesericci for help testing the Mac version of my script at the Austin Central Library. They have computers that reset everything, including permissions, which helps test how the script will behave on new never-used-the-terimnal computers. Thanks reese! (Deleted and reposted for...reasons)

https://cloud-fy56cdzy4-hack-club-bot.vercel.app/0screenshot_20230221-115414.png

Mon, Feb 20

:winter-hardware-wonderland: #hardware-party Day 6 building a custom USB rubber ducky: @KaiZheng-U049N5Y0WM9 printed some cases today!!!

https://cloud-f0tm41ept-hack-club-bot.vercel.app/0image.png

https://cloud-kg2f9oh6y-hack-club-bot.vercel.app/0image.png

https://cloud-bde0tm3wo-hack-club-bot.vercel.app/0image.png

Sun, Feb 19

:winter-hardware-wonderland: #hardware-party Day 5 building a custom USB rubber ducky: Open Sourced all the code I worked on yesterday on GitHub: rubber_ducky, circuitpython, and tinyusb. Next step is to make it upstream-able. Also sped up the Windows Powershell payload with @Jaxzog, and made it hide in the background. If anyone has any ideas on how to make this shorter/faster, I'd love to hear it (powershell experts :pleading:)! github.com/karmanyaahm/rubber_ducky/issues/1#issuecomment-1435768480

https://cloud-8xg6xck3l-hack-club-bot.vercel.app/0image.png

Fri, Feb 17

Day 4 of Winter Hardware Wonderland :winter-hardware-wonderland: , #hardware-party building Project Oreo, a custom USB rubber ducky: Core software finally integrated!!!!! (unoptimized tho)

Fri, Feb 17

Day 4 of Winter Hardware Wonderland :winter-hardware-wonderland:, #hardware-party building Project Oreo, a custom USB rubber ducky: the 3d printed case prototype. Just need a couple of minor changes before finalization

https://cloud-rf85afw2l-hack-club-bot.vercel.app/0img_20230217_141239.jpg

Fri, Feb 17

Day 4 of Winter Hardware Wonderland :winter-hardware-wonderland: #hardware-party, building Project Oreo, a custom USB rubber ducky: I fixed the pointer const issue by literally just adding a (void*) and now I'm getting fingerprints!!!!! (I need to change uint16 to uint8 but I'm very excited) Woo!!!!!

https://cloud-lc38s3n0j-hack-club-bot.vercel.app/0image.png

Fri, Feb 17

Day 3 of Winter Hardware Wonderland :winter-hardware-wonderland:, building Project Oreo, a custom USB rubber ducky: I got some sick renders of the case (Inventor Ray Tracing). Hopefully the prototype print tomorrow is successful, then I can send it to @KaiZheng-U049N5Y0WM9 🤞 On the software side, I have the core code (capture the first 10 setup packets and make a python function to receive them). It just doesn't work 😦. TODO Debug

https://cloud-ods6sl1t5-hack-club-bot.vercel.app/0image.png

https://cloud-92wtp3uhj-hack-club-bot.vercel.app/0image.png

https://cloud-a6aomtv8b-hack-club-bot.vercel.app/0trinkeyfullassembly-rt2.png

https://cloud-1jiyx4nrw-hack-club-bot.vercel.app/0trinkeyfullassembly-rt1.png

Thu, Feb 16

Day 2 of Winter Wonderland #hardware-party :winter-hardware-wonderland:, building Project Oreo, a custom rubber ducky. On the software side, I got CircuitPython building in a Pure Nix Shell. Turns out, some Python libraries are built using flint instead of setup.py. Thankfully, there's a mode in Nix to handle that. I can now modify the code that ships with a UF2 by default, making deployment just a one-file-copy (very important when you have 20 of something). Next steps: Look at Micropython manifests to figure out how to include data/image files in the UF2. Track the received setup packets (host fingerprint), and make a function to transmit those to Python from C. On the Hardware side, my friend designed and 3d printed the first prototype of the case at school. It doesn't quite fit (see USB Port area), so needs a second prototype.

https://cloud-rabrci189-hack-club-bot.vercel.app/0image.png

https://cloud-97wljgqxe-hack-club-bot.vercel.app/0screenshot_20230215_225101.png

https://cloud-ra8coqo6c-hack-club-bot.vercel.app/0image.png

Wed, Feb 15

My school got 5 4331s and 10 9200L-24t-4G-Es from Cisco and I'm in charge of setting up the first one :partyparrot: with no Cisco experience whatsoever (except teacher's help who is CCNA)

https://cloud-39smpb0da-hack-club-bot.vercel.app/0image.png

Wed, Feb 15

Submitted a PR reworking ntfy's rate limiting github.com/binwiederhier/ntfy/pull/609. What's sleep when you can hack?

https://cloud-ojvkozosz-hack-club-bot.vercel.app/0image.png

Wed, Feb 15

Day 1 of Winter Hardware Wonderland :winter-hardware-wonderland: : 1. Collected even more USB Setup phase fingerprints with my old Digispark-based device. Now I just need two types of teachers' HP Laptops and M1 Macs. 2. Building Circuitpython is haaaaaaard. The crazy dependency management is the primary reason I hate embedded things. Maybe I should Nix this... 3. @KaiZheng-U049N5Y0WM9 agreed to 3d print my cases and ship them to me ❤️. I need to hurry up on finalizing the design so they get here on time. Making a better open-source USB Rubber Ducky with OS Detection www.youtube.com/watch?v=FbiJCnHBr70&list=PLxlDG2SH_6rvZrNAuVXI0BIdv7MWvkMNm

https://cloud-fd1c2bxfa-hack-club-bot.vercel.app/0image.png

https://cloud-aelx9k68u-hack-club-bot.vercel.app/0image.png

Mon, Feb 13

Got some fingerprinting going with digisparks. Now I need to find patterns, maybe build an auto-pattern finder idk. I modified the Digispark USB library for this: github.com/karmanyaahm/rubber_ducky/blob/a327a965d21e93979edef3e88a16825134a1b6fa/printUSB/usbdrv.c#L421-L462 And wrote some code to pretty print that data: github.com/karmanyaahm/rubber_ducky/blob/main/printUSB/printUSB.ino tags: winter hardware :winter-hardware-wonderland:, C++

https://cloud-4zgu2a8ca-hack-club-bot.vercel.app/0image.png

https://cloud-oab4yj1lf-hack-club-bot.vercel.app/0image.png

Thu, Feb 9

Did someone say push notifications in the FOSS F-Droid version of Nextcloud? Edit to clarify: nr23730@github.com has been working on a version of Nextcloud that supports UnifiedPush. Originally, we thought it would need a gateway (a server that converts between push formats) to function. However, reading through the Nextcloud code, I realized that they don't have any URL normalization, they just append "/notification" to the provided URL (caused the need for a gateway in the first place). So, I realized, we could just add a "#" to the end of our push URL, like ntfy.sh/upABCDEFGH?up=1#, then, Nextcloud will send notifications to ntfy.sh/upABCDEFGH?up=1#/notification, which is effectively our original URL! (Stuff after # is ignored). One of the most useful (benign) injection attacks I've ever come up with. Boom! No gateway Nextcloud UnifiedPush: github.com/nr23730/nextcloud-android/pull/1/files

https://cloud-c57ztoz2g-hack-club-bot.vercel.app/0screenshot_20230208-232728.png

Tue, Jan 31

My first contribution to NixOS!!! (for IPFS Kubo) github.com/NixOS/nixpkgs/pull/213816 (scrappy: nix)

https://cloud-qdmuoq5r6-hack-club-bot.vercel.app/0image.png

Tue, Jan 31

mmmm Nix. Moved my website to my new NixOS IPFS Caddy server running on Hetzner with vastly better reliability than my previous Ubuntu/Oracle Free tier server. github.com/karmanyaahm/nixos-ipfs-caddy-web-server Image pre-cache/post-cache

https://cloud-fy2jxxzxs-hack-club-bot.vercel.app/0image.png

Mon, Jan 30

SMH, why are there no papers about USB OS fingerprinting using control/setup requests like github.com/krakrukra/PocketAdmin/wiki/fingerprinter :abraham-thinkin: There are so many based on timing.

https://cloud-mdho7jp5c-hack-club-bot.vercel.app/0image.png

Thu, Jan 26

Ordered winter wonderland supplies! (and a little something for myself, donating money to bank) bank.hackclub.com/project-oreo

https://cloud-oj25qo170-hack-club-bot.vercel.app/0image.png

Thu, Jan 26

my USB Rubber Ducky scripts can block mouse movement with a repeated mouse.move(x=-100,y=-100)

https://cloud-r3mbjjkfo-hack-club-bot.vercel.app/0image.png

Wed, Jan 25

Some reading... (slack is being stupid and not showing my image for some reason)

https://cloud-48rnt22p1-hack-club-bot.vercel.app/0screenshot_20230125_092336.png

Fri, Jan 20

Migrated k.malhotra.cc, my URL shortener and Golang vanity URL thing, from a dedicated CGI python service to a Jekyll collection and some IPFS redirects under my main website, one less thing to build and deploy.

https://cloud-a5wa8fb0u-hack-club-bot.vercel.app/0screenshot_20230119_215255.png

Tue, Jan 17

The first draft of redoing rate limiting for UnifiedPush in ntfy. This makes rate limits for UP topics count toward the receiver (phone) rather than the sender (large application server sending to a lot of people). This will remove the need for rate limit exception lists managed by hand. github.com/binwiederhier/ntfy/pull/584

https://cloud-5mtlv4134-hack-club-bot.vercel.app/0image.png

Sat, Dec 31, 2022

:epoch-tx: Mac Version of USB Rubber Ducky background changer we made @ Epoch TX (and subsequently lost the USB :P) Code: github.com/karmanyaahm/rubber_ducky/blob/096cc5ca15d37e1913747e22ab636f7e53cee582/v2win/mac/mac.ino

https://cloud-yw2czcq0s-hack-club-bot.vercel.app/0img_20221230_133545.jpg