DEFCON 20: bypassing endpoint security with USB keys
In this talk from the DEFCON 20 conference, Phil Polsta, Computer Security Professor at the University of Dubuque discusses the relative insecurity of using USB “keys” as a way of restricting access to tech resources. He explains in detail how any USB mass storage (flash or hard) drive can be made to appear as an authorized device. The devices can be built for between $18 and $30, and depending on the technique employed the hack requires little or no soldering, and only a basic knowledge of MCUs and C programming.
Comments
Alternative Project:
device: http://hakshop.myshopify.com/products/usb-rubber-ducky
firmware: http://code.google.com/p/ducky-decode/
The device can bypass USB endpoint security for $60USD. For source code available so you can pre-program the VID and PID for Mass Storage device or HID keyboard device.
Downside – will not brute force/enumerate a valid VID/PID like the device in this presentation.
This video have a rather good overview of how usb actually works on a protocol level….