24/7 incident line: Incident 24/7 · +34 902 540 891

The hardware we use to test the physical layer

The Evil Crow family and Titanium's bespoke hardware bring together the tools a red team uses to assess what perimeter defences never see: the USB port in a meeting room, the fob that opens a door, the screen at a control station. We only use them inside authorised engagements, with scope and rules of engagement agreed in writing.

Why the physical vector matters

Much of the investment in cybersecurity concentrates on the network and on email. But a determined attacker rarely comes in where they are most expected: they take advantage of the cable someone plugs in without thinking, the radio fob nobody has changed in ten years, or the operator workstation someone reaches physically for a minute.

Assessing that plane calls for real tools, not slides. Titanium designs and prepares that hardware, and above all knows what each finding means in a plant or an office, and how to turn it into a recommendation you can actually act on.

What the Evil Crow family is

Evil Crow is a line of hardware-hacking devices in discreet form factors —cables, adapters, small boards— built for security testing. Each model covers a different vector: keyboard emulation (BadUSB), keystroke logging, radio-frequency analysis or video-signal interception. Titanium folds them into its assessments and adapts them to each client's scenario.

Devices fitted with implants

When the engagement calls for it, we start from an everyday object —a charger, a mouse, a keyboard, a monitor, a power strip— and add an implant that gives it remote-control capabilities over Wi-Fi, Bluetooth or 4G. It lets us measure, with a realistic and controlled case, how far a seemingly harmless device can reach inside a trusted zone.

Bespoke device development

Not every scenario fits a catalogue. When needed, we develop the specific device and firmware for the test: the form factor, the connectivity and the capabilities that engagement requires, no more and no less. The target is never the gadget, but the response the organisation gives when it appears.

Responsible use

This is offensive hardware, and we treat it as such. It is only used inside contracted assessments, with the express authorisation of the systems' owner, a bounded scope and rules of engagement agreed beforehand. The purpose is always defensive: to find the gap before someone else does and close it.

The family

Six devices, six vectors

BadUSB in cable form

Evil Crow Cable

A charging cable that also behaves as a keyboard and can inject keystrokes. Compatible with any operating system and with multi-layout support. Available as USB-A to MicroUSB and USB-A to USB-C.

Keylogger with Wi-Fi

Evil Crow Keylogger

A hardware keylogger with BadUSB capabilities, managed from a web panel over Wi-Fi. It logs keystrokes, injects its own and stores the evidence on a microSD card.

Cable with keylogger

Evil Crow Cable Pro

Combines a keylogger and BadUSB in the discreet form of a phone cable. It can collect evidence on isolated equipment and offers USB Host functions for more demanding scenarios.

Radio frequency

Evil Crow RF

A radio-frequency analysis and testing tool, controlled from a web panel over Wi-Fi. It covers the common bands between 300 MHz and 928 MHz plus 2.4 GHz, with signal capture and replay.

Video interception

Evil Crow Screen

A device able to sit in the middle of a video signal (MITM) and capture it in real time. It is controlled remotely over Wi-Fi and runs on GNU/Linux.

BadUSB with Wi-Fi

Evil Crow Cable Wind

A BadUSB cable with Wi-Fi connectivity and a web management panel. It can collect evidence and work against offline equipment. Available as USB-C to USB-C and USB-A to USB-C.

Associated services

The device is the start, not the finish

Every assessment has its own context. Around the hardware, Titanium provides the services that adapt it to the client's scenario and make sure the result is useful.

Custom firmware and payloads

Development of tailored firmware and the specific payloads each test needs, rather than reusing generic templates.

Layouts and compatibility

Implementation of specific keyboard layouts, a USB Rubber Ducky-style script interpreter and identification as other peripherals depending on the target.

Device implants

Fitting commercial or ad-hoc devices with implants that add remote control over Wi-Fi, Bluetooth or 4G for realistic scenarios.

Bespoke development

Design of devices and firmware from scratch when the engagement fits no model in the catalogue.

Remote connectivity

Integration of Wi-Fi, Bluetooth or 4G connectivity and, where appropriate, of a VPN or a remote command channel for controlled operation.

Reading the results

Translation of each finding into real risk for the plant or the office, with prioritised recommendations you can apply.

Titanium · Legal information
Titanium · Legal information
Titanium · Legal information