PoisonTap. A security test that shows what happens when you plug an unknown device into a locked computer.

samy.pl/poisontap

Problem

The full read on this project is a sign-in away — what it solves, who it serves, and where it sits in the market.

Audience

The full read on this project is a sign-in away — what it solves, who it serves, and where it sits in the market.

Market

The full read on this project is a sign-in away — what it solves, who it serves, and where it sits in the market.

Pricing

The full read on this project is a sign-in away — what it solves, who it serves, and where it sits in the market.

Vaya's read on this project

Problem, audience, market, and the verdict — sign in to see it.

Updates

November 2018

Merge pull request #113 from victorhooi/patch-3 Nov 26

October 2018

Merge pull request #142 from HxxxxxS/master Oct 8
Fixed document.cookies -> document.cookie and added the hostname to t… Oct 8
First poison the user's cache of common JS files from CDNs Oct 8

June 2017

Execute as JS properly in all browsers Jun 29

April 2017

Add FAQ about cleaning up PoisonTap and safely working with it Apr 15
Merge pull request #112 from victorhooi/patch-2 Apr 15
Add FAQ entry about how to use captured cookies. Apr 15
Merge pull request #111 from victorhooi/patch-1 Apr 14
Add FAQ entry about adding additional domains. Apr 14
Merge pull request #61 from FlyingGraysons/patch-1 Apr 12

December 2016

Documented new USB vendor/productid that may work across more OS's Dec 8
Fix typo in backend Dec 4
Merge pull request #52 from fransla/master Dec 1
another fix Dec 1
bugfix Dec 1
Added the ability to dump the saved cookie file using a remote reques… Dec 1

November 2016

Merge pull request #51 from nbrady-techempower/patch-1 Nov 30
remove premature "exit 0" from rc.local Nov 29
Merge pull request #36 from MikeColes/master Nov 21