#Logitech options mac install

After spending part of my research budget in SecuRing, a brand-new vulnerable keyboard arrived!Ĭan you see that button in the left corner? That little creature communicates via WebSockets. To play with this server, I decided to buy the keyboard. So the driver runs a WebSocket server! Disassembling the LogiMgrDaemon showed that this WebSocket Server is not used to connect with my mouse but with Logitech Craft Keyboard (that I didn’t have at this moment - however, 10134 port is open anyway!). Okay, “426 Upgrade Required” and “Server: WebSocket++/0.7.0”. So maybe HTTP? Curl with the verbose option should be fine. Maybe netcat and some random bytes? It didn’t work. Surprisingly it listens on 10134 port on ALL interfaces! (Probably on Windows it was listening only on 127.0.0.1 since Tavis reported only that interface). This soft runs LogiMgrDaemon on your machine. I always use Objective-See’s TaskExplorer to do the basic analysis.

#Logitech options mac install

The Security-oriented brainīut what every IT Sec guy/gal would do when they have to install external software, especially when running with root privileges? Yeah, analyze it. It’s probably a good time to stop using Google Chrome, lol. BTW - it’s the second time when some1 from P0 team finds the same issue in almost the same time. The second Kudos belongs to who discovered similar issue on Windows simultaneously and reported it to the Logitech team. So I did! Kudos sectionįirst of all, I wanted to thank for helping me with the reversing part.

As I read in Logitech docs I had to download driver called “Logitech Options”. And here, the story begins… Since this mouse has extra buttons I wanted to assign them my custom actions. Some time ago, I bought Logitech MX Master wireless mouse to be used with my macs. Dissecting Logitech Options on Reguła.