Create Malicious QR Codes like MrRobot

Hello everyone,

As you might know about QR codes, they are widely used in public, from Wi-Fi hotspots to downloading files. In today’s video we will use varies methods to generate QR codes that will host fake Wi-Fi hotspots, links and much more!

A tool called QRGen can create malicious QR codes and even encode custom-made payloads, Also a website called qr-code-generator(.)com generates any type of QRcode, of course we are hackers we like to take advantage of things legally, and last thing is a website called malqr.shielder(.) it has ready to scan payloads that can corrupt old firmware’s such as ticket systems and so on.

QRgen is a little script to generate generic Malformed QRCodes. These qrcodes are useful if you want to test some QRCode scanner’s parser or how the application handle QRCode data.
MalQR is a collection of malicious QR Codes & Barcodes you can use to test the security of your scanners.

Steps to Install QRgen:

git clone https://github.com/h0nus/QRGen

cd QRGen

pip3 install -r requirements.txt OR python3 -m pip install -r requirements.txt

python3 qrgen.py

Personalization:

You can change the default wordlists to what you want by passing -w/–wordlist 🙂 Order of default wordlists group:

-SQL Injection
-XSS
-Command Injection
-Format String
-XXE
-String Fuzzing
-SSI Injection
-LFI/Directory Traversal
-custom passed with -w/–wordlist