EvilMouse — Mousejacking Attack Firmware for Evil Crow RF V2
Firmware combining sub-GHz RF replay with 2.4 GHz mousejacking attacks on the Evil Crow RF V2, using both CC1101 modules and the NRF24L01 to exploit vulnerable wireless mice and keyboards.
Overview
EvilMouse by viciaoxxx is a dual-purpose attack firmware for the Evil Crow RF V2 that combines sub-GHz RF signal replay with 2.4 GHz mousejacking attacks. It takes advantage of the device's full radio hardware — both CC1101 modules for sub-GHz and the NRF24L01 module for targeting vulnerable wireless input devices.
Features
- Mousejacking attacks — exploits vulnerabilities in wireless mice and keyboards that use unencrypted 2.4 GHz protocols
- Raw RF signal transmission — replay captured sub-GHz signals via the CC1101 modules
- Physical button controls — Button 1 transmits raw RF signals, Button 2 executes mousejack attacks
- Custom CC1101 drivers — includes ELECHOUSE CC1101 SRC drivers for precise RF control
How Mousejacking Works
Mousejacking targets wireless mice and keyboards that communicate with their USB dongle over unencrypted 2.4 GHz radio. The NRF24L01 module on the Evil Crow RF V2 can:
- Scan for nearby wireless input devices
- Inject keystrokes or mouse movements into the wireless channel
- Take control of the target computer by sending arbitrary HID commands
This makes it a powerful tool for demonstrating wireless input device vulnerabilities during penetration tests.
Setup
- Flash the
evilmousev2.inosketch to your Evil Crow RF V2 via Arduino IDE - Install the required CC1101 driver library
- Power on the device and use the physical buttons to switch between attack modes
