Annotated KS_NJCTR device overview
ESP32-S3 HID platform

KS_NJCTR

A compact keystroke injection toolkit for training, administration, incident response, and authorised security testing. Build payloads over Wi-Fi, store them on SD, and execute DuckyScript with precise HID output.

Buy KS_NJCTR Read docs
Wi-Fi controlEdit, save, run, and monitor payloads from the browser.
DuckyScriptSupports keystrokes, delays, repeats, button gates, and variables.
SD storagePayloads, config, and exfil files stay removable and inspectable.

Built for controlled HID operations.

KS_NJCTR keeps the operator close to the workflow: payload editing, Wi-Fi mode selection, autostart, arming mode, and visual status all live on the device.

01

Browser payload editor

Create and tune `.quack` files from the built-in web interface without removing the SD card.

02

Operator-gated scripts

Use the hardware button and `WAIT_FOR_BUTTON` to pause execution until the target is ready.

03

Wi-Fi or AP mode

Join an existing network or run as an access point with displayed SSID and IP details.

04

Autostart control

Mark a payload to launch at power-on, then hold the button at boot to enter arming mode.

05

Exfil endpoint

Receive files via the onboard `/exfil` endpoint and download them from the web UI.

06

Visual feedback

Screen status and RGB logo commands help track payload state during live use.

Payload workbench in your pocket.

Connect to the displayed IP address, open the interface, then create, edit, save, run, delete, or mark scripts for launch on startup.

  • ✓
    Payloads are stored in `/sd/PAYLOADS` as `.quack` files.
  • ✓
    Wi-Fi credentials live in `/sd/wifi_config.txt` for simple recovery.
  • ✓
    DuckyScript variables can inject `{WIFI_SSID}`, `{WIFI_IP}`, and `{WIFI_PW}`.
KS_NJCTR web interface showing payload and exfil links

Device details.

Designed around a Waveshare ESP32-S3-GEEK running CircuitPython with USB HID keyboard output.

PlatformWaveshare ESP32-S3-GEEK
RuntimeCircuitPython firmware with onboard web server
InputSD card, Wi-Fi web UI, hardware button
PayloadsDuckyScript-style `.quack` files
Default APNJCTR3000 / prettyflyforawifi
Use casesAuthorised testing, training, administration, onboarding, response drills
Exfiltrated data listing in the KS_NJCTR web interface

Designed for demonstrations that need repeatability.

Use it to teach HID risks, automate setup tasks, validate controls, or run tightly scoped security exercises where timing and repeatability matter.

Buy KS_NJCTR View full documentation