Elgato Stream Deck for Pentesters

Contact

LinkedIn
Email: [email protected]

Table

Summary
Prerequisites
Open Chrome with Different Profiles
How to Metasploit to Stream Deck
How to open Burp and other tools
Add Automation Script to Stream Deck

Summary

Why should I use a Stream Deck to be more productive?

One day, I came up with this idea while looking at random tech online and came across the Elgato Stream Deck. Streamers use the Stream Deck to make repetitive actions like turning the mic on and off to record a clip while they stream easily. I realized that I could simply use automation and invoke these scripts from the stream deck to increase my productivity and automate mundane actions like opening different chromes pages from different profiles. I also plan to use this document as a live document where I can keep adding automation scripts I add to my Stream Deck.

Top

Prerequisites

Some prerequisites to keep in mind if you planning to follow this tutorial. I am using Mac OS 11.6 at the time of writing this tutorial. For Chrome, I am using the laters version in November 2021. Also, I am using Mac OS Automator software. Also, if I see a lot of interest in this post, I might work on Windows version for this tutorial.

Top

How to open Chrome with different Profiles/Accounts on the Stream Deck.

The following step will help you create the necessary Automator scripts to open different chrome windows with other accounts from your computer.

Open the Automator program and click New Document if prompt. Then select application and click choose.
Search on the left upper search bar for Run Shell Script and drag that actions to the right window.
On the Run Shell Script windows, enter the following command line. This line will open Chrome and with the profile set as one in a new chrome window. By increasing the number and pressing Run on the Automator top right corner, you can test the code to verify you are able to open the correct browser profile you are trying to add for automation.
1 /Applications/Google\ Chrome.app/Contents/MacOS/Google\ chrome --profile-directory="Profile 1"
After you are able to test and run the correct profile got to File and click save. On the windows that open, name the Automation program as you which and make sure the File Format is set to Application and click save.
To test the script, just find where it is saved and click it like any other application to see if it opens Chrome with the correct profile. To choose a different profile, perform the same steps on the group, change the Profile 1 to Profile 2, and keep increasing the number depending on how many profiles you have on your Chrome Browser.

Top

How to Add Metasploit to Elgato Stream Deck.

The following steps will show you how to add Metasploit to Elgato Stream Deck.

pre-requirement make sure you have Metasploit installed and you are able to run it from the command line.

Open the Elgato Stream Deck software and search for Multi Action on the right search bar and drag to one of the empty fiels.
Enter the name you desire on the title section and on Content click on Content section the little arrow icon. Then add the follwing step to the Multi Action.
1. System: Open
2. System: Text
3. Stream Deck: Delay
4. System: Text
5. Stream Deck: Delay
6. System: Text
On the System: Option select the terminal application to open.
On the first System: Text enter the title you want to use to identify this step then enter the command line to start the Metasploit databse my example is below and check the box that said. Press Enter After messages
1 /opt/metasploit-framework/bin/msfdb start
On the two Stream Deck: Delay add 2000 ms
On the second System: Text enter the title you want to use to identify this step then enter the command line to answer the question from starting msfdb.
On the last System: Text enter the title you want to use to identify this step then enter the command line to start msfconsole. * Remember you will need to enter you password for sudo
1 sudo /opt/metasploit-framework/bin/msfconsole
I added another I con use to stop the msfdb after you are done with Metasploit. For this you will aldo need a Multi Action and add the fallowing functionality.
1. System: Open
2. System: Text
On the System: Option select the terminal application to open.
On the first System: Text enter the title you want to use to identify this step then enter the command line to stop the database.
1 /opt/metasploit-framework/bin/msfdb stop
Last step change your icons to one you want if you want to use the icon I have you can save it from this post as png.
- icon

Top

How to open Burp and other tools with Stream Deck

The following steps will show you how to add Burp and other software to Elgato Stream Deck.

Open the Elgato Stream Deck software and search for Open on the right search bar and drag to one of the empty fiels.
Click on the Icon on the middle windows and on the options bellow click on Choose then select the app you want to run with that click.
Last test the new icon and recreate any of the steps with as many apps as you want too add to the stream deck.

Top

How to Add Automation script to Elgato Stream Deck.

The following steps will show you how to add Automator scripts to Elgato Stream Deck.

Open the Elgato Stream Deck software and search for open on the right search bar.
Drag the open icon on the Stream Deck software to an empty window.
Click on the icon on the middle window, enter your title, click choose, and select the application you want to run when clicking on the Stream Deck.
I recommend creating a folder with your Icons and logos you might want to use for the icon. Remember to try different sizes to get a good result on the Stream Deck. This is how I have my icons organized. Remember, the icon might not look fine, so you might need to try a different resolution on the Stream Deck to make it look correct.