←back to thread

95 points thunderbong | 1 comments | | HN request time: 0s | source
Show context
freitzzz ◴[] No.41912158[source]
The additional features this tool brings (port enumeration, list usb devices, system info), makes me thing the tool was not designed for good/ethical reasons, but to ease the life of infostealers that are usually distributed via Discord.
replies(2): >>41912429 #>>41913076 #
1. kuschku ◴[] No.41913076[source]
It's not even done well.

Say you're building a feature for a password manager to import passwords from firefox. You'd want the the firefox decryption functions to be available as library.

Or say you're building a tool to extract data from broken hard drives, partially recovered filesystems, etc. Again, you'd want to have this available as a library so you can import the functions you need and use them in your own tooling.

Normally you'd expect this package to primarily export a lib with a "cli" subfolder that provides a sample CLI tool that imports the lib.

The fact that this tool requires libusb which is solely needed for the useless list usb devices functionality is extremely sketchy. It makes using this tool legitimately harder and only helps attackers.