samyk/poisontap
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
License & maintenance
No license stated: by default nobody may reuse the code. Ask the authors before using it in a product.
Last code push 7 years ago.