I would like to use Flipper to log into Windows 10 automatically.

BadUSB
#1

Hello everybody.
I would like to use Flipper to log into Windows 10 automatically. (The access password is known).
I believe it is possible with scripts, but my knowledge is still a little limited.

#2

MS is talking (better writing) a lot about passwordless, but the actions are limited.
There is a working FIDO2 2MFA over AzureAD, but I haven’t got it working standalone Ower Windows Hello.
The second point is, that MS want FIDO2, the Flipper provides U2F…

If you talk about BadUSB, I tend to say this is bad practice.
Of cause you can fire a DuckyScript, that act as keyboard and type your credentials, but it is a little complicated.
Connect Flipper, choose BadUSB, choose your script, fire it… And it will only write one string, enter another string, in every field the cursor is. So you meet one Script to log in from the beginning (username/tab/password/enter) and one to log in from the screensaver (password/enter).
A DuckySkript is never aware about the field/screen, it is just 'a keyboard".

1 Like
#3

I have to agree about Ducky script being bad security since all your info would be in plain text on the Flipper.

1 Like