Description
Alibaba store to order for better price:
https://www.alibaba.com/product-detail/Cactus-WHID-WiFi-HID-whid-injector_62415010197.html?
WiFi HID Injector for Fun & Profit – An USB Rubberducky On Steroids. [ Customized HW based on Atmega 32u4 and ESP-12S.
This device allows keystrokes to be sent via WiFi to a target machine. The target recognises the Ducky as both a standard HID keyboard and a serial port, allows interactive commands and scripts to be executed on the target remotely.
Hardware Design Author: Luca Bongiorni 
Based on ESPloit by Corey Harding of www.LegacySecurityGroup.com
Third-Party Softwares Compatible with WHID’s Hardware
https://github.com/whid-injector/WHID
https://m.youtube.com/channel/UCzh8wlTSYbdZCs__Djym5UQ
- whid.ninja
- https://github.com/exploitagency/ESPloitV2
- https://github.com/sensepost/USaBUSe
- https://github.com/spacehuhn/wifi_ducky
- https://github.com/basic4/WiDucky
Package contains:
- Cactus WHID x 1
Please noted that we have put the anti-static wrapper to protect whid pcb, please careful remove it before putting pcb into the case.
See more details at whid.ninja
Note: Please check the link if you need re-flash the firmware yourself.
WHID Injector has an Official Android App https://play.google.com/store/apps/details?id=whid.usb.injector
For bulk order, please contact zhengzeyi@aprbrother.com for discount.
John –
Just read the github and the blogpost! Cannot wait to get mine! 🙂
Spenkm@n –
Awesome tool for pentesters!
Ulrich –
Great device to play with!
Way cheaper than Malduino and the wifi feature is awesome!
zheng zeyi –
Appreciate your highly commend.
John –
I ordered one a few weeks back and its great, works like a charm, i showed it to my colleagues and they wondered what it could do so i did some live payloads.
After that i showed the management in a security team meeting, telling them that this kind of devices go for about 12 dollars and everyone can buy them on the internet, by just plugging them in i showed them to extract their wifi passwords and mail them to my email, now we talk about security measures to protect our firm from this kind of attacks.
Making people aware is the first line of defense in my opinion.
The WHID Cactus is just one device to penetrate our office
el.bryan17 (verified owner) –
Received mine today and tried the basics, it was worth the wait <3 thanks 😀
Edna –
I just have a question, then I will buy it, is this pre-flashed?
zheng zeyi –
Yes, Whid is pre flashed.
Jayden –
Works perfect! One question is there a link with all the commands or payloads? I can’t find any one the internet…
redhawk –
I think this product has been abandoned, because no any update and tutorials on how to flash it with new Wifi Duck firmware.
Yan –
We’ve added a link for how to re-flash the dongle yourself. For wifi ducky, it should work with similar method.
Recursion [GER] –
One of my beloved toys to play and experiment with.
To be honest, I’m more a script-kid than a pro or professional (&paid) pentester, but for some tests and things to try, this seems more than enough for me.
Thanks for handing out my sweet little cactus! <3