 I refuse to introduce you, you need no introduction, please take this show away. Thanks guys! Seriously, huge thanks to Zero and the Wireless Village for having us again. I think this is our sixth year presenting. And this year, we actually have some wireless tools as well that are new. So that's exciting as well as some that are not wireless. Yeah, I'm gonna do that. Hang on a second. Hunter 2. Oh my god. No, it's not that, hang on, it's probably Hunter 3. I need a mouse. Sure, me? Yep. Okay, so you are here at the Hack 5 Talk at the Wireless Village. If you're not familiar with a Hack 5, raise your hand. Every year, if somebody comes to the booth and they're like, I'll get a duck, a pineapple, a squirrel, and one of those Hack 5s. But if you're not familiar with Hack 5, we have now been inspiring, we've been inspired to elevate the InfoSec community by educating and equipping and really encouraging an all-inclusive community, the kind of community that welcomed me when I was just a phone freak kid on IRC. And we're trying to continue that kind of idea in the hacking community. So that's our mission. But internally, and really you're here with the development team of Hack 5, we're gonna talk a lot about the internal stuff. We have a motto within which is make it do the thing. If it can do the thing, then we're all doing really well. So honestly, a lot of our stuff years and years ago was pretty complex. More and more is what we try to do is make it what we lovingly call agent-proof. Bash Bunny, perfect example of that. So easy, even an FBI agent can use it. You know, drag and drop a text file. And I can't believe it, but only just a few days ago, August 5th became Hack 5's 14th birthday. I'm just so blessed and I just want to say thank you to everybody here and at home wherever you're watching this that's made this dream possible. I never would have imagined it would come this far. Or that we'd be able to have this much fun building ridiculous toys and just having fun hacking what it's all about, right? So without further ado, I'd like to introduce the team. You guys know me, but there's also a Just Fox Trot, Mark, a Knot Corbin who's not Dallas, and Tim Zor, who's also a Tim. I think it was last year or the year before we gave a talk here and one of the first slides was being cute talking about a pineapple, a turtle, a bunny and a squirrel walking into a bar. This year we're talking about a pineapple, a ducky, a turtle. Did it already. A pineapple, a ducky, a turtle, a bunny, a squirrel, a bug, an owl, a crab, and a shark walking into a bar. So we're going to need a bigger bar. It's clearly been a big year and it's actually not a bar. It's a cloud. Who's at our talk last year? So last year we introduced our cloud platform which is called Hack5 Cloud C2 and it allows you to remotely manage all of your Hack5 devices so you can plant them at client sites and have remote access and do all the shenanigans that you normally do when your butt's there except remotely which is really nice. And it's got a beautiful web interface and it makes it really easy to do the kinds of things that you do with your devices but even easier. So I'm going to show you a little demo of that now as it relates to some of the new features. Who here has used Hack5 Cloud C2? It's a free download. You should grab it, c2.hack5.org. So this is the dashboard of Cloud C2. You can see we've got a royal flush of all of our devices here, our screen crab, our packet squirrel, Wi-Fi pineapple, land turtle, shark jack and signal owl and we can manage all of these as they are deployed at this site and one of the new exciting features in version 2.0 that just released we can see here in the land turtle if I just over the web drop into this loot section, there's no loot yet but if I get into a turtle shell, no pun intended I've got an Nmap log file here and I'm like alright let's SCP that let's c2x fill that because it goes over the c2 protocol specify that it's a string if you want to be able to read it as a text file in the UI and give it a name of a payload now when we come over to loot we can see that we've got that exfiltrated loot in this area and we can go ahead and see the contents of that loot right then and there. So this new section within Cloud C2 is in all of the devices including the screen crab so we can come into loot under the screen crab and similarly you can click view on this jpeg and see desktop right we can actually come over and configure the screen crab and see it streaming we can turn the devices LED off if we want to be even more stealthy and you know configure all the options the capture interval whether we're taking video or still images you know what we're doing with the SD card or we can just scroll down and just watch live as what's going on on this person's computer screen looks like they're watching an episode of hack 5 highly recommend it and that is the new loot interface and the new C2 exfiltration system built into Cloud C2 and as it relates to the newest member of the hack 5 family the screen crab the screen crab was a excuse to make a really good pun about screen grabs gone amok and here to tell us more about the device is not Corbin not the developer of the not screen crab I joined hack 5 almost a year and a half ago and one of the first things I get on my desk is a device and said at the time said you might just put an update feature in this and a year passed and now I built the thing so the first thing we did after Black Mesa was we increased the anti mass spectrometer by 105% it was really risky but we needed the extra resolution sorry about about half my joke but basically the magic in this is it is the screen so you plug in a HDMI cable into it it's mirrored on the nonexistent screen on this little arm box that's doing all the processing we then using the config that you can change on the SD card we can either save it directly to the SD or we can stream it effectively live to the C2 this is both fascinating and terrifying because after I built it I plugged it in and was watching Darren's screen in Oakland from my house I was like why are you watching that I've never forgotten to disconnect in development ever he filled the server several times you ever see 40 gigs of screens Chromecast but yeah so the screen time is really cool because it's one thing to get a report after a pen test and be like we own you so hard like yeah those are packets but if I show you your meeting yesterday you're gonna panic probably the cool thing about this device is it's out of the box which is now metal our first metal case we did that to make it way cooler sorry so that's a thermal joke thank you super configurable really easy if you don't want to ever configure this device you can pull it out of the box use it as default there's a button you can even change the modes without ever touching the SD card or you can configure it there the coolest thing is this is actually one of the most powerful devices on the cloud C2 this was built and designed around this so that you can deploy this it will be stealthy and persistent and reliable and you can change the configuration if you are watching screenshots and they start that financial slide up and you're like I really need to see every second of this you switch it to video and you're recording a video of their screen so there's a lot of potential with this it's now my favorite because it's terrifying and I hope you guys get to play around with this and enjoy it so here is the config file it's a wall of text because that's also the help page for you there's actually only a handful of the big options you just set the interval pick image or video and plug it in and let it go all the feedback for the device even though this is a small black box we have RGB LED and no the LED codes are not Morris code you can actually remember them and identify them so that's good making this kind of one of the most robust out of box devices we've made so and then here we have the loop folder and way too many images of probably there in the screen oh god okay yep that's just crumb cast super risky random click there but it captures in 1080 the cool thing and as you can see as a crumb cast so for everyone wondering and who's already asked me about HDCP we're not doing any wizardry it's just working which is sweet so yeah crumb cast is cool seeing the time change is awesome look all those amazing HD wall papers but obviously the use case here goes far beyond just watching people's TV clock HDMI in HDMI out pretty much you know we're in the land of the dongle we showed up here there's an HDMI cable who's to say there's not a crab somewhere in this line okay but that's basically the crab Dallas really killed it on this crab you should ask him after the talk how many times he's reflashed a real tech boot motor and anyway real tech boot motor so it's a fun to be had there you know it's also a hoot I know I promise that wasn't going to but you have to understand there's a rule for all of the hack 5 devices it has to either be well it has to both be an emoji and there has to be a dad joke in there somewhere okay just practicing one of these days is going to happen are they still doing defcon kids you can't buy the kids no mark you can't buy the kids you go to Disneyland and they're just like in these stroller things with wheels just sorry that's a different ex filtration is a lot of fun so signals analysis so we developed a new tool called the signal owl it's a signals analysis and mesh sensor platform that's developed with the same kind of basic hack 5 idea which is let's make it you know simple enough an FBI agent can use it by copying a file to USB drive so run simple payloads and you can just you know imagine planting this innocuous little device anywhere at a client site and being able to capture you know Bluetooth or Zigbee or sub gigahertz or IR or you know whatever have you and to talk to us about that I'd like to introduce the lead developer of that tool Tim so yes as Darren was just saying this is sort of a lightweight inexpensive signals analysis tool and it acts as a mesh sensor and the idea is Dallas said this is kind of the land of the dongle we've all got a thousand adapters and our favorite dongles and use them all the time and the idea is that this is sort of a dongle platform it's got built-in Wi-Fi and it can mesh with other signal owls and actually Wi-Fi pineapples and it works with a number of common transceivers and tools that we we know and love air crack ng, kismet, mdk4 and a whole host of other tools that that we're making and yeah you can you can sort of imagine like Darren said deploying a bunch of owls with a bunch of different dongles and getting a good look at much more than just Wi-Fi and to sort of tie all of that together it also integrates with our Cloud C2 and the Xfill tool that Darren just showed so you can bring all those signals home yeah the idea was you know how do we really make a very versatile and cost-effective platform to do signals analysis and that was the idea behind this hardware and it shares a lot of similarities with say the Wi-Fi pineapple nano under the hood as far as the atheros radio and you know with the support for all of those additional USB hosts and also we figured hey let's make something that can plant and really be unobtrusive which is why the second USB port the actually the USB port that's closest to the pigtail power port is actually completely passed through so if you were to plug this device into the back of a computer nothing would enumerate it would just be getting power and then you plug in a keyboard, a mouse, a webcam whatever to this port it's going to pass through to the computer without any without any obstruction whatsoever so no it does not log anything in the middle it's literally electrical which means that when you run up on those situations where you're like you know look at the back of the television and you're like oh man I want to plant this back here but there's already a chrome cast and a crab taking the power that's okay put it in line so what's called a signal scrap I know I can't keep any of them straight anymore it's like children you know just call them whatever I'm going to be a great dad anyway that brings us to the pineapple and I know that a lot of people here have been using the wi-fi pineapple for quite a while who here had a mark one a mark two mark three mark four mark five nano and tetra and we kind of deviated from the naming scheme there but we really kept it alive in the namesake mark our developer will now explain wi-fi pineapple thank you very much my speaker notes are quite literally the change like that I'm going to try and make it a little bit more interesting read the full request yeah I don't know if there's a couple of module developers in the audience all but I've been being asked for a while to update the kernel update open to be a T and we did that it's now running 1907 instead of what was it 1505 because I am going to say it so there's a lot more stability updates in the latest firmware the support for WP3 and OWE which is what's Rick is Rick around so on I know he's looking forward to doing some OWE kind of fun stuff this changes to pine AP that I'm sure a lot of people know about it uses about 50% less memory I know at least there's one of you in the audience who came up to me complaining about it being a little bit unstable that's gone and the improved result I don't know if you should go over beacon responses I'm assuming there's a lot of people it's kind of interesting with it yeah I'm so different mobile devices especially kind of start to tune out pine AP especially when you're repeating the SSIDs in your beacon pool so now if you have a large beacon pool say a thousand SSIDs is like a lot of people have it will chunk through which one yeah it's off what do you do right in my mind I've completely lost what I was saying yeah if you have a thousand plus SSIDs around that time it will start beaconing about 200 to 250 at a time and it really improves how mobile devices respond so ultimately thank you I really appreciate it you could have done that sooner we cannot turn it up anymore I wasn't that quiet Shirley anyway everyone's just on a mission to interrupt me this am I really that bad at it anyway so yeah basically the end point is to kind of slam all clients and that's what the pineapple is for yeah that's all I have it's here for Mark too because he's been tirelessly engineering and engineering and engineering pine AP and literally making it do the thing so really appreciate all of that now we got a few other animals in the same ecosystem that also got similar updates on the 19.07 open WT version with that latest kernel and happy to report that the Squirtle also has that the land turtle in the packet Squirtle also land turtle 3G got a little bit some improvements on 3G connectivity there so that's a really fun one for bring your own network attacks where you can basically evade the firewall because you brought your own network that's always fun so updates to all of those are available at downloads.hackfive.org all of that just dropped on Monday August 5th the hack five birthday and in conjunction with the C2 the cloud C2 version 2.0 which you should totally grab so that is the land turtle in the packet Squirtle and we're not going to forget about our little bunny friend because the bash bunny got another firmware update just a few weeks ago as well firmware version 1.6 most notably includes now first-party support for the metasploit framework who here likes the metasploit right metasploit plus bash bunny as it turns out lethal combo when you bring your own network you plug bash bunny into a box it's like oh cool USB ethernet adapter let's be friends it's like here's an IP address here's like I love IP addresses and then catatonic prime decided to write a payload that goes like hey let me log in via SMB with these credits and it's like now there's a three credits it's like okay cool let me log in via SMB with these credits it's like nope and then next thing you know 5,000 tries a minute later it's proof forcing with metasploit on a bash bunny and it's just kind of insane what the possibilities are there but anyway that's a fun one so update your bash bunny just get better and better and we're really proud of that little guy on the the duck in the bug front the duck is ducking the bug is bugging but really perfect examples of tools that just do the thing and that leads us to really the second chapter of this talk and I understand we're in the wireless village okay but I want to know who here likes ethernet I know it's a hard wired connection but listen you know there's some Wi-Fi hacking going on I like the ethernet so this this really comes down to a story about how the well three of us were in Hawaii for a little much needed retreat after last DEF CON and on our way back we were sitting in a in a bar having some tacos and margaritas waiting for a flight and we're looking next to the register and there's this exposed ethernet jack we're looking at each other we're like I how much would have bet that's live yeah we're like well we worked assisted men's before I mean when I worked as a system and I just literally plugged every patch panel thing into the switch because the last thing I want to do is get a call the projector is not working we plugged it into the wall jack and it's like all right you know whatever who who have you have seen these all around places this photo was taken somewhere very nearby I'm here well that was the inspiration behind creating a new tool that we lovingly are calling the shark jack and I happen to have it right here take the cap off and that right there is the shark jack you flip the switch you jack into the network and you execute payloads in seconds it's like a bash bunny for networks and I'm really excited because as soon as I reach into my pocket and click a few more times it will be available now at sharkjack.com and shipping in a couple of weeks this right here is actually a 3d printed and painted one we literally just got the DHL shipment in like 30 minutes ago of these guys and I am so stoked because you think about like the possibilities that were opened up when we came up with keystroke injection with the USB rubber duckie or when we evolved that with the bash bunny the kind of hot plug attacks you can do there for all those unsuspecting USB ports and it's like well why leave ethernet out ethernet can have so much fun so the device is very similar to the language of all of the other hack 5 devices this one actually is our first with a battery you know most ethernet doesn't give you power and so you charge it by USB-C and you get feedback on what it's doing from an RGB LED very similar to the bash bunny it's literally the same LED command on the bash bunny in your payload that you run on this and very quickly you know it's got a switch where you can toggle it between an arming mode where you can load up your payload of choice or an attack mode where it executes that and I guess in this case there's also an off switch so you can just charge it and I'm just really excited about what's possible now with the shark jack that's the shark jack so lastly we're going to wrap up by telling you a little bit about what's on the horizon some future plans and then we'll open it up for some Q&A what are you guys doing after this there is a hack 5 meet up tonight the details are on the hack 5 twitter account I'm going to just go wherever Shannon points me in the direction up so that's in the future as well you want to talk about those C2 updates so even though we just dropped 2.0 we have we have a lot of features planned so you'll notice in the C2 2.0 that if you have an old device firmware connected to your now upgraded C2 which you upgraded by clicking the upgrade button when you logged in it will now say your old device is out of date because we have enhanced the protocol so we can pump out features like it's our job because it is so device upgrades you're used to you know running your devices or pop an upgrade up in on a SD or USB or what have you getting on the device and upgrading your devices but now you'll be able to in the future along with upgrading the C2 through the UI you'll be able to upgrade your devices which means for the first time persisting some data across firmware for the whole lineup which is pretty sweet that also means real persistence like real remote persistence a lot of people have to pull their devices to actually so that's pretty sweet and the other thing is we just out of all the things we are displaying in the C2 we have more data than we had time to show you so we have a lot of really cool features to build upon the loot tool as well as all the stuff for the pineapple recon and pretty much all the devices are getting tons of new cool C2 support there's also another device that's going to get some love and it's a firmware upgrade it's currently on firmware version 1.0.0 and it's nine years old and that's the case because it literally does the thing anybody here use the USB rubber ducky yeah exactly so USB rubber ducky is getting new firmware that's going to add a whole lot of new first party tools do you want to talk about any of those fun things planned yeah can't talk about that yet but there's a bunch of new additions to the ducky script language that's just going to make the tool even greater and the hardware itself has always had the potential but it's just always been doing what it meant to do so well that there was never really a need and now that we have the resources to actually expand and kind of move back around on some of these projects that's one that's really been on the back burner for a while and it's one that we're going to be giving a lot of love so if you've been using one and you are noodling on you know like oh it would be really cool if it did this you know much the same with all of the devices you know you hear us talk about the signal owl or any of these and you're like hey it would be really cool if it did that or whatever have you then come to us and tell us because that's why we're up here the reason why all of the devices are the way they are outside of the dad jokes that's me yeah oh okay it's Hunter too you want to tell them about payloads now that we dropped the owl payloads galore yeah so if you've used hackpad devices before you know we love payloads we love making platforms open-ended devices we have really evil ideas but you guys are scarier than us and so it's hard so you guys get to contribute and share them the terror payloads will in the future be even easier to share and fork and build off of each other and all live in one happy place instead of fragmented github so you've been using hackpad devices for a while and you've been through the evolution from switchblade to the ducky to the funny turtle and squirtle and everything else and you've been there tracking down that that one good nugget on that one guys blog that you saw on a tweet or buried within the hack5 forums and you have similarly ideas of what you would like to see payload wise let us know as well because we're working on making that experience a lot better and that's probably something that we'll be demoing at next fcon but that is one of the next big focuses for us so that's kind of like where we're headed I figure you guys might have some questions so let's just open it up for some Q&A so the question is for the screencrab streaming is it going over RTMP or what I know it's going over the cloud c2 protocol which is that modular protocol which currently is hdbs it's always encrypted so the question was resolution support for the screencrab so what's happening internally is there's a splitter and that splitter is a 1080p splitter now unofficially I have gotten it to do resolutions higher than 1080p but not 4k that requires paying real tech a lot more money as it turns out but putting it on a computer and doing some 1600x1200 sure I've had experience with that but the supported resolution is 1080p and below and for anything that's higher I've put it on a 4k Chromecast on a 4k TV and it just downscales it to 1080p so if you think that's going to be an issue on your engagement be wary of that but if you think it's not and in many cases it might not then you're probably good to go and that's resolution and all the rest I've been looking at in future iterations that's the other really important distinction here is the design of the crab is such that it's a seamless pass-through so by using a splitter it means that we're introducing absolutely no latency whatsoever on the monitor when you plug it into the computer or the game console or whatever it's not going to freak out like suddenly you're going to start seeing a Debian boot environment or something like that you're not which is pretty cool you do it the other way you introduce lag and it's something you've got to work on so then you take this route and bring the product to market while you continue to work on the other route okay so the question is whether or not we're going to add USB-C support in a firmware update and the answer is yes our software is going to change your USB type A port to type C I'm kidding I'm just having too much fun yes in fact the first question is whether or not we're going to do a USB rubber ducky type C and the answer is yes we're going to do it in cable form as far as the firmware update for the rubber ducky I don't have a firm timeline on that it will be most likely Q4 Q4 sounds good I'll stand up here and start saying Q numbers but yeah that will probably also coincide with a ducky that has USB-C in cable form or other connectors yes the question is will shark jack support metasploit as well we're going to need a moment yeah so it comes down to space more than anything else under the hood it's a 580 megahertz device kind of similar in horsepower to the wifi pineapple tetra but it's really a space and battery issue so if you can fit it on it let's just go with it's an open platform and we're not going to stop you and also if you contribute that way we love that that's fantastic out of the box now the question is whether the signal owl can do inline signal demodulation what kind of signal give me an example ok so the question is as far as demodulation of sub gigahertz signals so the answer to that is our focus is to build a platform a platform that can build simple payloads that we can develop a community around that can contribute to that so that it's a very easy platform to deploy somewhere and have it run those and we want to just support everything that we all know and love so things like ubertooth and yardsticks and RTL-SDRs and bluetooth adapters and things of that nature so I know that in many of those cases RTL streamer does some demodulation and really it's one of those like we're going to stand on the shoulders of giants we're going to develop some custom tools and the custom tools that we're currently focusing on right now are bluetooth if there's a specific use case for something that sub gigahertz then we'll probably work on that as well was there actually a question about the mesh? closer right I'll remember this time in case anyone was wondering about the mesh capabilities of it the idea is to as demoed in the c2 video with the c2x build stuff to be able to kind of litter them around maybe a building on an engagement and have them all forward to a central place maybe a more powerful system like a tentrum and then you can do all the processing kind of off out of the way and yeah yes so right now we're only doing video on the hdmi audio passes through but we're not capturing the audio does pass through the splitter but we're not actually capturing the audio currently sharkjackpoe sounds cool yeah I mean it would save from having to put um3841 on the side of the box and have a hazmat logo on it I mean somebody did poe mod to practice it no reason not to I'm honestly always curious how much demand there really is for poe squirrels or now sharks as well who here deals with regularly poe environments where that's of use to them okay that's a good indication alright well we're good on time if you guys don't have any other questions we're just really stoked to be here and really grateful that you all came out to kind of celebrate what we've been working on lately and again like I said you know if you have questions about the devices or you have ideas of things that you would like them to do or future devices or specific payloads please come and talk to all of us we're going to be at the hack 5 booth for the rest of the remainder of the conference and we'd love to hear your feedback because it does shape what we're doing here the question is how do you arm the sharkjack and the answer is with the handy dandy so there's an off position there's the middle position which is for arming mode and then the far forward position is for attack mode so when you put it into arming mode then you can connect it to your computer static yourself an IP address there we go it's booting and then you can SSH in and it simply runs the payload in slash root slash payload we're going to write some helper scripts it's easier to kind of manage loot that it's expiltrated or load collections of payloads from our library okay well there's yes good yes you absolutely could so the payload would look so simple it would basically be like well right now it's blinking green because it's in arming mode but if I had booted this thing into attack mode it would be running payload which is on it which is a simple nmap scan of the network like you get into client site and you just like plug this thing into a jack and then you wait a few minutes and then the light turns off when it's done you unplug you walk away the way that I would do it in this case in the attack payload the first thing it's going to do is try to get an IP address from DHCP and it indicates to you that it's doing that by making a magenta LED so you're like okay cool so I got purple light and then when it's scanning the network it blinks rapidly and then the light goes green the trap is clean so similarly I would just write a payload that tries to get an IP address and if it does go green and if it doesn't go red and then just by plugging it in you can tell that's easy enough and I'm sure an agent can use it and you can also do really scary logical ones too like logical connections you could totally do logical connections especially like with two of these you could have one as a listener and one as a sender to see if they can those two segments are can speak to each other or you can have them try to excel out of every port in the firewall and see which ones are available there's so many possibilities we're only just starting to scratch the surface as it's literally zero days old they're still in transit I'm like waiting for someone to frantically the package center said it was on its way anyway yes yeah yeah absolutely the question was whether or not it's compatible with Mac changer and yeah absolutely storage wise no it does not take an SD card however it has orders of magnitude more memory than were on the Apollo missions and their code is very tight I mean I was in a conference call where Mark asked for what was it 10 kilobytes for this application on this on the signal L and then how how much did it come out to seven right really trying that's 3k of savings to you guys yes okay so I'll get to just like also to answer your question about the storage also it speaks cloud c2 and you saw how easy it was to put in your payload c2x fill a file and then it goes up to your cloud server where I'm hoping you have gigs and gigs and gigs trust me I've filled gigs and gigs and gigs of my Chromecast and then the next question was regarding the signal owl and whether the pass through port would enable you to do key logging and if you plug the key log into this port then yes but otherwise no it's literally electrical is this pass through so the computer is not going to notice anything and also doing some crazy impedance checking which I highly doubt so it's not like man in the middle in the device in any logical sense it's literally electrical so that we can just siphon off some power for ourselves and the power that it takes is like 100 to 200 milliamps so it's nothing so the question was on the power on the screen crab and yes it is usbc and that is just for power so we're just across the board moving to usbc for all of our devices and in this case this runs off of 5 volts 1 amp it's just 5 watts it's really not much oh sorry I can't keep any of these straight you asked about a shark I answered about a crab I barely remember my own name oh yeah it powers over usbc charges the battery in about 10 minutes there is no data connection now I understood the context of the question in order to get into the device you put it in arming mode and you connect over ethernet so you just need a usb ethernet adapter and if you need one of those you can grab one it's called a lantern turtle I'm kidding but also I can imagine some payloads doing some fun fuckery there okay so to summarize the question it's in regards to the screen crab and it's abilities to capture over hdmi and it's refresh rate whereas there's other connectors out there like display port and also in regards to VR the application that we had in mind when we developed this was not to man in the middle of VR it was to man in the middle of the conference room projector or television and we've even had people come up to me like I'm going to use this to watch whatever my kids are watching and keep tabs on them you're one of those parents I'm not a dad yet I just got dad jokes um it's hdmi the protocol is hdmi 1.4 so whatever 1.4 is I just got this question earlier I need to dig into the data sheet of the splitter on here to give you an exact answer on the refresh rate it's 60 hertz okay so it just negotiates 1080 60 and also hdmi because it's like the most universal and adaptable thing under the sun if I come over here I'm going to see a set of dongles for vga and display port and micro display port and everything else and so for everybody that's like oh that would be great if it was vga I'm going to get a dongle um do you want to hold this here? shaking with excitement Darren the man who ran up just gave Darren the shock that was just delivered so he's extremely excited this is how he looks in meetings I have $6 we'll stop the bidding at 60 feel the clicking action he's going to be like this for the rest of the weekend the switch on the side is red it's so good um they in fact are they're available now at sharkjack.com and if you use the coupon code DEF CON 27 you'll save 10% they're shipping in just a few weeks these are the first of the first of the first off the line I can't sell you any here at the con you would have to get me so wasted and that is not an invitation let's go oh my god it looks so good it looks so good there's a little hacker glider on the stickers sorry there's a special moment Seb sitting here on the front and he knows the special moments when you unboxed for the very first time and you realized that you just gave birth to a pineapple ah okay um also it comes in an Altoids 10 how cool is that we should wrap soon unless there are other questions thank you