Skip to content

added sd files#2083

Open
WrackerTony wants to merge 1 commit intoBruceDevices:devfrom
WrackerTony:bruce-sd
Open

added sd files#2083
WrackerTony wants to merge 1 commit intoBruceDevices:devfrom
WrackerTony:bruce-sd

Conversation

@WrackerTony
Copy link
Contributor

SD Files Enhancement Pull Request

Proposed Changes

This PR significantly expands the SD card file collection for Bruce firmware by adding multiple categories of useful files:

  • BadUSB/BlueDucky Payloads: Three Windows-targeted keyboard injection payloads for testing
  • Interpreter Scripts: 18 JavaScript-based interactive utilities, tools, and games for Bruce's JS interpreter
  • Captive Portal Templates: 2 English WiFi login portal pages mimicking IKEA and McDonald's

These additions provide users with a comprehensive toolkit of ready-to-use scripts and payloads, eliminating the need to create common utilities from scratch and enabling immediate functionality after SD card setup.

Types of Changes

New Feature - SD card content additions across three categories:

  • BadUSB/BlueDucky keyboard injection payloads
  • JavaScript interpreter applications (utilities, converters, games)
  • HTML captive portal templates for WiFi phishing demonstrations

No firmware code changes - purely SD card content files.

Verification

BadUSB Payloads (sd_files/BadUSB and BlueDucky/):

  1. Copy payload files to SD card's BadUSB directory
  2. Navigate to BadUSB module in Bruce
  3. Test each payload (Windows only):
    • explorer-spam.txt - Rapidly opens 30 File Explorer windows (GUI+E spam)
    • force-shutdown.txt - Opens PowerShell and executes immediate shutdown command
    • rickroll-payload.txt - Opens PowerShell and launches Rick Astley video in browser

Interpreter Scripts (sd_files/interpreter/):

Utility Tools:

  • bruce_force.js (496 lines) - WiFi password brute force tool with network scanning, dictionary loading from SD card, visual attack progress, attempt tracking, and automatic credential saving
  • color_picker.js (91 lines) - RGB color viewer with adjustable sliders for each channel, displays hex values and color preview
  • counter.js (78 lines) - Simple counter with adjustable step size (1/5/10/100), supports negative values
  • flashlight.js (73 lines) - Screen flashlight with 3 modes: white light, warm light, and strobe effect
  • morse_code.js (157 lines) - Text to Morse code translator with character selector and multi-line output display
  • number_converter.js (112 lines) - Number base converter supporting decimal, hexadecimal, binary, and octal with adjustable multiplier
  • password_generator.js (111 lines) - Random password generator with configurable length (6-24), includes uppercase, lowercase, numbers, and symbols with strength indicator
  • random_number.js (109 lines) - Random number generator with editable min/max range
  • stopwatch.js (121 lines) - Stopwatch with start/stop/reset, displays time in HH:MM:SS format, updates per second
  • system_info.js (110 lines) - Device information viewer displaying board name, battery level with visual bar, screen resolution, current time/date, and uptime

Converters & Calculators:

  • currency_converter.js (210 lines) - Real-time currency converter supporting 10 currencies (USD, EUR, GBP, CZK, JPY, CHF, CAD, AUD, CNY, PLN) with live exchange rates via API and offline fallback rates
  • tip_calculator.js (120 lines) - Restaurant tip calculator with adjustable bill amount, tip percentage, split count, and 6 currency options
  • unit_converter.js (197 lines) - Multi-category unit converter supporting Length (8 units), Weight (6 units), Temperature (3 units), Volume (7 units), Speed (4 units), and Data (5 units)

Games:

  • dice_roller.js (104 lines) - Dice rolling simulator supporting 1-4 dice, displays individual results and total
  • reaction_test.js (215 lines) - Reaction time test game with wait screen → green "GO" → measure response time, displays rating and tracks personal best
  • snake_game.js (185 lines) - Classic Snake game with turn left/right controls, food collection, collision detection, and score tracking
  • tictactoe.js (179 lines) - Two-player tic-tac-toe game with cursor movement, X/O marking, win detection, and draw detection

Portal Templates (sd_files/portals/en/):

  1. Copy HTML files to SD card's portals/en/ directory
  2. Navigate to WiFi > Captive Portal module
  3. Test each portal:
    • ikea.html (139 lines) - IKEA-branded WiFi login page with blue/yellow color scheme, captures email and password via POST to /post
    • mc_donalds.html (168 lines) - McDonald's-branded WiFi login with red/yellow theme, burger emojis, Google Fonts, captures credentials

Testing

Testing Performed:

  • Verified all interpreter scripts execute without errors in the past
  • Confirmed UI layouts work on t-embed
  • Confirmed WiFi brute force tool properly integrates with Bruce's WiFi module

Testing Recommendations:

  • Test interpreter scripts on multiple Bruce devices (M5Stack Cardputer, T-Deck, T-Display, etc.)
  • Verify BadUSB payloads on target Windows systems (Windows 10/11)
  • Test captive portals with various mobile devices and browsers
  • Validate currency converter with active internet connection
  • Test WiFi tools in controlled environments only

Linked Issues

not really

User-Facing Change

Added 23 new SD card files: 3 BadUSB payloads (Windows-targeted), 18 JavaScript interpreter programs (utilities, converters, games), and 2 captive portal templates (IKEA, McDonald's). Users should copy these files to their SD card to access new functionality. WiFi tools require proper Bruce firmware capabilities.

Further Comments

Educational Use Only:
All security-related tools (WiFi brute force, captive portals, BadUSB payloads) are for authorized penetration testing and educational purposes only. Users must comply with local laws and obtain proper authorization before testing on any systems or networks they do not own.

Future Enhancements:

  • Additional portal templates (Starbucks, Airport WiFi, etc.)
  • More interpreter games and utilities
  • Multi-language portal variants
  • Password dictionary files for WiFi testing

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant