Skip to main content

Questions tagged [badusb]

A USB device firmware hack allowing the device to spoof other USB devices when plugged into a computer, and run code on the victim's machine.

Filter by
Sorted by
Tagged with
2 votes
1 answer
172 views

Is it possibile to capture unlock pin of smartphone(android/ios) using usb cable?

For example, bad USB cable( charging devices) loaded with script to record the unlock code of an android phone which is current being charged. so basically, the bad usb cable and the usb charger is ...
Maxfield's user avatar
  • 157
0 votes
0 answers
90 views

If you encrypt an entire USB with Veracrypt can malware be put on the USB while encrypted?

Let's say that you take a USB drive and encrypt the entire thing with Veracrypt. Could someone modify that USB drive to include malware on it? This is not assuming that physical changes to the device ...
Rideboards's user avatar
1 vote
0 answers
135 views

Different types of USB charger attacks that work on Android phones

I'm wondering about different types of malicious USB charger attacks that work on Android devices when USB debugging option is disabled and if the USB option is set to "charge only". I'm not ...
Kurusakibill074's user avatar
0 votes
0 answers
115 views

Check BadUSB or similar threats via software [duplicate]

I recently purchased a fake USB flash drive for its cool and beautiful case. I know that the seller modified the firmware so that it shows a different capacity to the operating system, but I am not ...
fflianjie fflianjie's user avatar
0 votes
0 answers
120 views

How exactly are hidraw 'Billboard' devices interrogated?

I have some USBHub ( Ethernet + HDMI + USB + VGA). When it doesn't have anything connected it exposes to Linux operating system device: 'hiddev0, hidraw1' in opposite to HID mouse: which is visible as ...
nusch's user avatar
  • 47
2 votes
1 answer
112 views

Could a "writeblocker" device be circumvented by it's own restrictions?

Speaking hypothetically, if a person wished to secure their data drives and a "writeblocker" device was of concern, could a piece of encryption software be crafted to write to the drive in ...
Séan Brown's user avatar
2 votes
2 answers
725 views

Is there software on Windows that will protect myself from devices like the "USB Rubber Ducky"? [duplicate]

I'm pretty sure a lot of you are familiar with the "USB Rubber Ducky", the USB stick that emulates a keyboard. Is there software for Windows that will prevent this type of attack, while ...
Felix An's user avatar
  • 137
0 votes
2 answers
426 views

BadUSB and external USB peripherals - is using a USB device in a sandbox a risk?

I would like to ask about "BadUSB" vulnerability real world attack vectors. I got this idea, because I use virtual box as a sandbox for checking incoming files from clients (I am not an ...
M_Ryan's user avatar
  • 33
3 votes
2 answers
5k views

Difference in attack vectors between Bash Bunny and USB Rubber Ducky

Can someone please explain to me the difference between the USB Rubber Ducky and the Bash Bunny? I understand that the Bash Bunny can emulate more trusted devices then just the keyboard like the USB ...
Rideboards's user avatar
0 votes
1 answer
686 views

Are there any USB flash controllers without any firmware?

UFDs with a Phison 2251 controller are famous for being potential BadUSB devices. It's basically a (8051) microprocessor running application-specific firmware, which is stored on the big flash memory ...
user avatar
2 votes
1 answer
363 views

If I buy any FIPS 140 certified USB flash drive can I be sure that it's firmware is signed?

Does either FIPS 140-2 or FIPS 140-3 certification require USB flash drive's firmware to be signed so that malicious computer cannot overwrite flash drive's firmware? e.g. badusb attack. If I buy any ...
user264191's user avatar
3 votes
3 answers
2k views

Identifying a BadUSB using Linux

Using Linux, is there anyway to detect that an arbitrary USB device is a BadUSB or not? For example: Booting a Linux into multi-user.target. No graphical interface / tty (getty login). Plug the USB ...
FooBar's user avatar
  • 41
1 vote
2 answers
877 views

How to safely use a possible BadUSB?

I have to use a USB stick that introduce itself as a HID device. I'm not sure if it does something fishy behind the scene or not, but I rather to think it's not safe and take the necessary steps to ...
FooBar's user avatar
  • 41
1 vote
2 answers
1k views

How unsafe is a USB flash drive vs DVD for OS (Tails linux)?

Compared to a DVD live Tails Linux, how unsafe is using the USB version? I'm trying to help a friend who for years has been mired in the laborious iterative process of remastering their own DVDs of ...
GGibson's user avatar
  • 113
-1 votes
1 answer
279 views

How to check if ps2 to usb adapter isnt malicious? [duplicate]

I got an adapter for free from someone in my city. After googling the serial number I found it also here: https://www.ebay.de/itm/MOUSE-ADAPTER-501215-B004-PS-2-TO-USB-CONVERTER-/331762184078 Can I ...
applecake's user avatar
2 votes
1 answer
2k views

How do I securely transfer information between airgapped systems?

I'm trying to take information that's on Computer A, write it onto some form of persistent storage, and copy that information onto Computer B. Both will be running a relatively recent version of ...
ijustlovemath's user avatar
0 votes
0 answers
75 views

Is it possible to verify that a USB adapter is not malicious? [duplicate]

I have some generic USB C-to-A and A-to-C adapters that were bought cheaply. I thought that if any of them had any advanced capabilities (other than being "dumb" adapters) such as mimicking ...
Amit's user avatar
  • 53
5 votes
1 answer
1k views

Windows group policies to protect against Rubber Ducky attack

I have these group policies set on my personal computer and it seems to me they should protect against Rubber Ducky attack (however I've read other threads that say it's hard to protect against, hence ...
Amit's user avatar
  • 53
0 votes
0 answers
166 views

To prevent BadUSB attacks - can't you just block a connection to the specific vulnerable microcontrollers?

Since only a select amount of amount of microcontrollers in the USBs can be reprogrammed, isn't it just possible to block that certain kinds of microcontroller containing devices?
Sir Muffington's user avatar
1 vote
0 answers
121 views

Aren't these "new" self-programmable gaming mouses a new security threat? [duplicate]

I have recently bought one of the recent "best" USB gaming mouses out there. The thing that is bothering that the marketing material says it contains a self-programmable computer embedded in ...
Sir Muffington's user avatar
1 vote
2 answers
484 views

I just found out about BadUSB. Should I worry about it although I bought my USB from official stores?

I want to prevent malicious program accessing my PC via USB. My thread is as follows: I'm just a regular citizen with a non-dangerous job. However I live in a country that didn't care about data ...
John Mtenyolo Gunzra Jiyothi's user avatar
1 vote
2 answers
923 views

Does the WP(Write Protect) pin of a USB flash memory controller prevent tampering with its firmware?

Does WP(Write Protect) pin of a USB flash memory controller prevent tampering with its firmware? I want to have an USB stick that I can make it read-only and insert it in any untrusted PC without ...
learner's user avatar
  • 11
1 vote
1 answer
248 views

Formatting potentially infected USB stick before plugging it into trusted devices

As stated in the title - is formatting my own USB stick on a separate computer with live-Ubuntu enough to prevent malware infection? I work as computer technician and sometimes my pendrives must be ...
Dominic's user avatar
  • 45
40 votes
8 answers
8k views

Are all USB-based attacks dependent on being able to inject keystrokes?

From what I've seen, USB-based attacks such as RubberDucky need to be able to open a terminal and then execute commands from there, usually to download and then install malware or to open a reverse ...
user942937's user avatar
2 votes
3 answers
2k views

Secure USB (unique identifier)

There is a requirement for an unattended, publicly-accessible machine that I have to only allow company-approved USB devices (e.g., USB mass storage, keyboard, mouse, Bluetooth, etc.,) and block all ...
David's user avatar
  • 21
0 votes
0 answers
300 views

How to analyze a USB device of having possibly malicious capabilities?

So I recently ordered a chinese external USB card and I would like to find out whether it has some hidden functionality, which might become malicious. It has buttons integrated in it so Linux using ...
Sir Muffington's user avatar
1 vote
0 answers
369 views

What are the main attack vectors on USB storage drives on Windows 10?

I am trying to understand what generic risks are there in using my thumb drive to transfer files to some untrusted machine and plugging it back to my Windows device. Specifically I am interested in ...
kirilloffs's user avatar
0 votes
2 answers
408 views

Consequence of BadUSB and laptops?

Are internal components vulnerable to BadUSB? Say you have a laptop. Even if you don't use any USB devices (like mice and keyboard), if the laptop has internal components that connect through USB (...
54352345's user avatar
1 vote
0 answers
205 views

Secure data transfer in the face of DMA attacks even on SD card v 7.0

I want to move data from an insecure host to a secure host, e.g. to update the software on a Ballot marking device, or move data back and forth between such hosts. But as we know, even common thumb ...
nealmcb's user avatar
  • 20.8k
1 vote
0 answers
2k views

Phison 2309 susceptible to Bad USB?

I've got two Kingston DataTraveler 100 G3s, each with 32GB capacity. I checked their controllers and both have the Phison 2309 controllers in them. I've tried Googling around to check if the PS2309 ...
VGC3OCJA50's user avatar
0 votes
1 answer
193 views

How can I explain our system admins that AV can't protect our enterprise machines from attacks leverage on USBninja? [closed]

Was hoping to get your support to help to explain to our system admins how come the AV can't protect our enterprise from attacks that can be generated from USBninja. How can I explain our system ...
Filipon's user avatar
  • 1,294
3 votes
1 answer
422 views

BadUSB device functionality

I would like to know if a BadUsb can simulate a real device or it just execute programmed functions and stop working. For example, if a "mouse" is a BadUsb, when I plug it in a PC, will it work like a ...
Mycroft's user avatar
  • 768
2 votes
1 answer
800 views

How to mitigate the new malicious USB cable USBHarpoon (NOT BadUSB) threat in an enterprise? [duplicate]

In this case, the victims may think they are using a generic USB cable, but the PC will recognize the cable as a Human Interface Device, much like it would a mouse or keyboard, giving the attacker ...
Filipon's user avatar
  • 1,294
0 votes
0 answers
407 views

Need to make a USB device look like a keyboard

My company is implementing "BitLocker to Go" encryption to encrypt USB flash drives. However we us Barco USB wireless presentation devices. Each time one is plugged in, Bitlocker wants to encrypt it (...
Tim Hart's user avatar
1 vote
1 answer
464 views

Detecting USB-based(Arduino Leonardo) attacks

Can a USB-based atack, e.g., BadUSB, RubberyDucky be detected by observing the output from dmesg? I bought a brand new DFRobot Beetle, which is essentialy a miniaturized Leonardo. A few seconds after ...
user942937's user avatar
3 votes
2 answers
1k views

How we can prevent innocent looking USBNinja (USBHarpoon) attacks?

Is there anything we can do across the company to make sure USBNinja and other similar USB cables that looks so real for users can really be mitigated?
Filipon's user avatar
  • 1,294
0 votes
1 answer
790 views

Preventing firmware hacking with read only OS [closed]

Scenario 1: Attack from Internet, SD-card, USB-stick --> direct reflash BIOS firmware, without the operating system as an intermediate stage --> BIOS firmware or any other firmware which is stored ...
user avatar
11 votes
1 answer
3k views

Is all the alarmism around BadUSB really called for with respect to host devices?

I can understand why there was such a furor about BadUSB and indeed it poses a rather earthshaking threat to the base assumptions of many in their cyber security threat models. Things which many of us ...
J. Doe's user avatar
  • 299
5 votes
2 answers
3k views

Are DVDs vulnerable to firmware malware (and assorted questions)? [closed]

I have a few questions about DVD drives. Are DVD drives and SATA interfaces vulnerable to issues like BadUSB caused by being able to reprogram firmware of the drive or disk or even spreading to other ...
Aoi. T_015's user avatar
3 votes
1 answer
599 views

Is USB type c vulnerable to BadUSB?

Consider the new SanDisk ultra dual type c flash drive. Would that be safer once computers start to come with type c ports?
J. Doe's user avatar
  • 299
3 votes
1 answer
654 views

In the age of BadUSB, are micro SD cards a secure alternative media immune to those style of attacks? [duplicate]

Why or why not? As a corollary, I saw a presentation description in a recent CCC demonstrating the (non-hostile) use of micro SD cards as a cheap source of processing power. Does this render micro SD ...
J. Doe's user avatar
  • 299
0 votes
1 answer
4k views

Mouse receiver shows up as keyboard too - is this an issue?

I have recently seen some wireless mice that when the receiver is plugged in to a USB port, Windows device manager shows a new "HID-compliant mouse" (as expected) and also an "HID-compliant keyboard." ...
WBT's user avatar
  • 556
6 votes
3 answers
455 views

Is it safe to connect a random USB battery from a bin to my phone without stopping data transfer in some way?

I've asked the question Power-only USB connection to charge my phone - as simple as cutting the data lines? in electronics SE. In order to bypass the "Why do you want to do this?" request ...
uhoh's user avatar
  • 1,409
2 votes
2 answers
3k views

How can I connect a USB device to a virtual machine while bypassing the host?

From time-to-time it would be useful to connect an untrusted USB device to my computer. If I could connect it directly to a virtual machine, bypassing the host. that would be secure enough for me. I ...
paj28's user avatar
  • 33.5k
2 votes
0 answers
322 views

Linux selective USB-Locking against evil-maid-attacks [closed]

While the question of completely disabling usb-controllers and -storage to defeat an evil-maid-attack has already been answered here quite often, I have a different solution in mind. Upon locking the ...
Lars's user avatar
  • 121
3 votes
1 answer
273 views

Security of external harware when using VMs

I'm new to using VMs, so I suspect this question may answer itself with experience, however, this question has been bugging me. If a computer user has a VM set up, and plugs in a pen drive, what's ...
CoilKid's user avatar
  • 133
4 votes
2 answers
423 views

What is the best way to screen potentially compromised USB or flash devices?

I've got some flash devices. It is a bit like playing Russian roulette. The devices are of unknown origin containing information of unknown value. However, the potential value is great enough to be ...
user148650's user avatar
2 votes
1 answer
290 views

Does BadUSB infect USB Port PCB Chips?

All answered questions seem to relate to peripherals only. Can BadUSB infect the port pcb chip within a laptop or internal desktop hub (i.e. the strip of usb ports along side a laptop or atop a ...
Stix's user avatar
  • 21
1 vote
1 answer
571 views

data extraction via Badusb from a "secure endpoint"

I am aware of the ducky quacky devices, however, is there a possibility of impersonating an usb input device to extract data from the target computer? Michael Smith's defcon talk ( http://www....
keoxkeox's user avatar
  • 113
1 vote
1 answer
638 views

Rubber ducky windows mitigation

So I am familiar with badusb or rubber ducky attacks, I lack possession of one currently to test any of my questions. Essentially my question is can you mitigate rubber ducky attacks using windows ...
TiDoX's user avatar
  • 28