So I recently ordered a chinese external USB card and I would like to find out whether it has some hidden functionality, which might become malicious. It has buttons integrated in it so Linux using libusb -vv displays it of having HID capabilities, which already alerted me since it could be used to inject keystrokes.

  • How do I go on continuing my analysis?
  • Can I dump more information about its capabilities using libusb?
  • How do I dump its firmware for reverse engineering purposes? According to [this] that's only possible with a JTAG/UART connection?
  • Is there something like Wireshark but for USB?

Bonus points if you also add some libusb example code.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.