1

So I recently ordered a chinese external USB card and I would like to find out whether it has some hidden functionality, which might become malicious. It has buttons integrated in it so Linux using libusb -vv displays it of having HID capabilities, which already alerted me since it could be used to inject keystrokes.

  • How do I go on continuing my analysis?
  • Can I dump more information about its capabilities using libusb?
  • How do I dump its firmware for reverse engineering purposes? According to [this] that's only possible with a JTAG/UART connection?
  • Is there something like Wireshark but for USB?

Bonus points if you also add some libusb example code.

2

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.