Questions tagged [badusb]
A USB device firmware hack allowing the device to spoof other USB devices when plugged into a computer, and run code on the victim's machine.
76
questions
0
votes
0
answers
64
views
If you encrypt an entire USB with Veracrypt can malware be put on the USB while encrypted?
Let's say that you take a USB drive and encrypt the entire thing with Veracrypt. Could someone modify that USB drive to include malware on it? This is not assuming that physical changes to the device ...
- 587
1
vote
0
answers
118
views
Different types of USB charger attacks that work on Android phones
I'm wondering about different types of malicious USB charger attacks that work on Android devices when USB debugging option is disabled and if the USB option is set to "charge only".
I'm not ...
0
votes
0
answers
102
views
Check BadUSB or similar threats via software [duplicate]
I recently purchased a fake USB flash drive for its cool and beautiful case. I know that the seller modified the firmware so that it shows a different capacity to the operating system, but I am not ...
0
votes
0
answers
106
views
How exactly are hidraw 'Billboard' devices interrogated?
I have some USBHub ( Ethernet + HDMI + USB + VGA). When it doesn't have anything connected it exposes to Linux operating system device:
'hiddev0, hidraw1'
in opposite to HID mouse:
which is visible as ...
- 47
2
votes
1
answer
102
views
Could a "writeblocker" device be circumvented by it's own restrictions?
Speaking hypothetically, if a person wished to secure their data drives and a "writeblocker" device was of concern, could a piece of encryption software be crafted to write to the drive in ...
- 21
2
votes
2
answers
675
views
Is there software on Windows that will protect myself from devices like the "USB Rubber Ducky"? [duplicate]
I'm pretty sure a lot of you are familiar with the "USB Rubber Ducky", the USB stick that emulates a keyboard. Is there software for Windows that will prevent this type of attack, while ...
- 137
0
votes
2
answers
398
views
BadUSB and external USB peripherals - is using a USB device in a sandbox a risk?
I would like to ask about "BadUSB" vulnerability real world attack vectors. I got this idea, because I use virtual box as a sandbox for checking incoming files from clients (I am not an ...
- 33
3
votes
2
answers
5k
views
Difference in attack vectors between Bash Bunny and USB Rubber Ducky
Can someone please explain to me the difference between the USB Rubber Ducky and the Bash Bunny? I understand that the Bash Bunny can emulate more trusted devices then just the keyboard like the USB ...
- 587
0
votes
1
answer
643
views
Are there any USB flash controllers without any firmware?
UFDs with a Phison 2251 controller are famous for being potential BadUSB devices. It's basically a (8051) microprocessor running application-specific firmware, which is stored on the big flash memory ...
user186877
2
votes
1
answer
345
views
If I buy any FIPS 140 certified USB flash drive can I be sure that it's firmware is signed?
Does either FIPS 140-2 or FIPS 140-3 certification require USB flash drive's firmware to be signed so that malicious computer cannot overwrite flash drive's firmware? e.g. badusb attack.
If I buy any ...
- 21
3
votes
3
answers
2k
views
Identifying a BadUSB using Linux
Using Linux, is there anyway to detect that an arbitrary USB device is a BadUSB or not?
For example:
Booting a Linux into multi-user.target.
No graphical interface / tty (getty login).
Plug the USB ...
- 41
1
vote
2
answers
842
views
How to safely use a possible BadUSB?
I have to use a USB stick that introduce itself as a HID device. I'm not sure if it does something fishy behind the scene or not, but I rather to think it's not safe and take the necessary steps to ...
- 41
1
vote
2
answers
1k
views
How unsafe is a USB flash drive vs DVD for OS (Tails linux)?
Compared to a DVD live Tails Linux, how unsafe is using the USB version?
I'm trying to help a friend who for years has been mired in the laborious iterative process of remastering their own DVDs of ...
- 113
-1
votes
1
answer
263
views
How to check if ps2 to usb adapter isnt malicious? [duplicate]
I got an adapter for free from someone in my city.
After googling the serial number I found it also here:
https://www.ebay.de/itm/MOUSE-ADAPTER-501215-B004-PS-2-TO-USB-CONVERTER-/331762184078
Can I ...
2
votes
1
answer
2k
views
How do I securely transfer information between airgapped systems?
I'm trying to take information that's on Computer A, write it onto some form of persistent storage, and copy that information onto Computer B. Both will be running a relatively recent version of ...
- 151
0
votes
0
answers
73
views
Is it possible to verify that a USB adapter is not malicious? [duplicate]
I have some generic USB C-to-A and A-to-C adapters that were bought cheaply.
I thought that if any of them had any advanced capabilities (other than being "dumb" adapters) such as mimicking ...
- 53
5
votes
1
answer
1k
views
Windows group policies to protect against Rubber Ducky attack
I have these group policies set on my personal computer and it seems to me they should protect against Rubber Ducky attack (however I've read other threads that say it's hard to protect against, hence ...
- 53
0
votes
0
answers
159
views
To prevent BadUSB attacks - can't you just block a connection to the specific vulnerable microcontrollers?
Since only a select amount of amount of microcontrollers in the USBs can be reprogrammed, isn't it just possible to block that certain kinds of microcontroller containing devices?
- 1,611
1
vote
0
answers
120
views
Aren't these "new" self-programmable gaming mouses a new security threat? [duplicate]
I have recently bought one of the recent "best" USB gaming mouses out there. The thing that is bothering that the marketing material says it contains a self-programmable computer embedded in ...
- 1,611
1
vote
2
answers
463
views
I just found out about BadUSB. Should I worry about it although I bought my USB from official stores?
I want to prevent malicious program accessing my PC via USB. My thread is as follows: I'm just a regular citizen with a non-dangerous job. However I live in a country that didn't care about data ...
1
vote
2
answers
886
views
Does the WP(Write Protect) pin of a USB flash memory controller prevent tampering with its firmware?
Does WP(Write Protect) pin of a USB flash memory controller prevent tampering with its firmware?
I want to have an USB stick that I can make it read-only and insert it in any untrusted PC without ...
- 11
1
vote
1
answer
231
views
Formatting potentially infected USB stick before plugging it into trusted devices
As stated in the title - is formatting my own USB stick on a separate computer with live-Ubuntu enough to prevent malware infection?
I work as computer technician and sometimes my pendrives must be ...
- 45
40
votes
8
answers
8k
views
Are all USB-based attacks dependent on being able to inject keystrokes?
From what I've seen, USB-based attacks such as RubberDucky need to be able to open a terminal and then execute commands from there, usually to download and then install malware or to open a reverse ...
- 983
2
votes
3
answers
2k
views
Secure USB (unique identifier)
There is a requirement for an unattended, publicly-accessible machine that I have to only allow company-approved USB devices (e.g., USB mass storage, keyboard, mouse, Bluetooth, etc.,) and block all ...
- 21
0
votes
0
answers
291
views
How to analyze a USB device of having possibly malicious capabilities?
So I recently ordered a chinese external USB card and I would like to find out whether it has some hidden functionality, which might become malicious. It has buttons integrated in it so Linux using ...
- 1,611
1
vote
0
answers
350
views
What are the main attack vectors on USB storage drives on Windows 10?
I am trying to understand what generic risks are there in using my thumb drive to transfer files to some untrusted machine and plugging it back to my Windows device. Specifically I am interested in ...
- 11
0
votes
2
answers
399
views
Consequence of BadUSB and laptops?
Are internal components vulnerable to BadUSB? Say you have a laptop. Even if you don't use any USB devices (like mice and keyboard), if the laptop has internal components that connect through USB (...
- 9
1
vote
0
answers
195
views
Secure data transfer in the face of DMA attacks even on SD card v 7.0
I want to move data from an insecure host to a secure host, e.g. to update the software on a Ballot marking device, or move data back and forth between such hosts. But as we know, even common thumb ...
- 20.8k
1
vote
0
answers
2k
views
Phison 2309 susceptible to Bad USB?
I've got two Kingston DataTraveler 100 G3s, each with 32GB capacity. I checked their controllers and both have the Phison 2309 controllers in them. I've tried Googling around to check if the PS2309 ...
- 21
0
votes
1
answer
188
views
How can I explain our system admins that AV can't protect our enterprise machines from attacks leverage on USBninja? [closed]
Was hoping to get your support to help to explain to our system admins how come the AV can't protect our enterprise from attacks that can be generated from USBninja. How can I explain our system ...
- 1,264
3
votes
1
answer
408
views
BadUSB device functionality
I would like to know if a BadUsb can simulate a real device or it just execute programmed functions and stop working. For example, if a "mouse" is a BadUsb, when I plug it in a PC, will it work like a ...
- 758
2
votes
1
answer
790
views
How to mitigate the new malicious USB cable USBHarpoon (NOT BadUSB) threat in an enterprise? [duplicate]
In this case, the victims may think they are using a generic USB cable, but the PC will recognize the cable as a Human Interface Device, much like it would a mouse or keyboard, giving the attacker ...
- 1,264
0
votes
0
answers
400
views
Need to make a USB device look like a keyboard
My company is implementing "BitLocker to Go" encryption to encrypt USB flash drives.
However we us Barco USB wireless presentation devices. Each time one is plugged in, Bitlocker wants to encrypt it (...
- 11
1
vote
1
answer
458
views
Detecting USB-based(Arduino Leonardo) attacks
Can a USB-based atack, e.g., BadUSB, RubberyDucky be detected by observing the output from dmesg?
I bought a brand new DFRobot Beetle, which is essentialy a miniaturized Leonardo.
A few seconds after ...
- 983
3
votes
2
answers
1k
views
How we can prevent innocent looking USBNinja (USBHarpoon) attacks?
Is there anything we can do across the company to make sure USBNinja and other similar USB cables that looks so real for users can really be mitigated?
- 1,264
0
votes
1
answer
780
views
Preventing firmware hacking with read only OS [closed]
Scenario 1:
Attack from Internet, SD-card, USB-stick -->
direct reflash BIOS firmware, without the operating system as an intermediate stage -->
BIOS firmware or any other firmware which is stored ...
user183457
11
votes
1
answer
3k
views
Is all the alarmism around BadUSB really called for with respect to host devices?
I can understand why there was such a furor about BadUSB and indeed it poses a rather earthshaking threat to the base assumptions of many in their cyber security threat models. Things which many of us ...
- 299
5
votes
2
answers
3k
views
Are DVDs vulnerable to firmware malware (and assorted questions)? [closed]
I have a few questions about DVD drives.
Are DVD drives and SATA interfaces vulnerable to issues like BadUSB caused by being able to reprogram firmware of the drive or disk or even spreading to other ...
- 193
3
votes
1
answer
588
views
Is USB type c vulnerable to BadUSB?
Consider the new SanDisk ultra dual type c flash drive. Would that be safer once computers start to come with type c ports?
- 299
3
votes
1
answer
641
views
In the age of BadUSB, are micro SD cards a secure alternative media immune to those style of attacks? [duplicate]
Why or why not? As a corollary, I saw a presentation description in a recent CCC demonstrating the (non-hostile) use of micro SD cards as a cheap source of processing power. Does this render micro SD ...
- 299
0
votes
1
answer
3k
views
Mouse receiver shows up as keyboard too - is this an issue?
I have recently seen some wireless mice that when the receiver is plugged in to a USB port, Windows device manager shows a new "HID-compliant mouse" (as expected) and also an "HID-compliant keyboard." ...
- 556
6
votes
3
answers
442
views
Is it safe to connect a random USB battery from a bin to my phone without stopping data transfer in some way?
I've asked the question Power-only USB connection to charge my phone - as simple as cutting the data lines? in electronics SE. In order to bypass the "Why do you want to do this?" request ...
- 1,415
2
votes
2
answers
3k
views
How can I connect a USB device to a virtual machine while bypassing the host?
From time-to-time it would be useful to connect an untrusted USB device to my computer. If I could connect it directly to a virtual machine, bypassing the host. that would be secure enough for me. I ...
- 33.4k
2
votes
0
answers
312
views
Linux selective USB-Locking against evil-maid-attacks [closed]
While the question of completely disabling usb-controllers and -storage to defeat an evil-maid-attack has already been answered here quite often, I have a different solution in mind.
Upon locking the ...
- 121
3
votes
1
answer
263
views
Security of external harware when using VMs
I'm new to using VMs, so I suspect this question may answer itself with experience, however, this question has been bugging me.
If a computer user has a VM set up, and plugs in a pen drive, what's ...
- 133
4
votes
2
answers
419
views
What is the best way to screen potentially compromised USB or flash devices?
I've got some flash devices. It is a bit like playing Russian roulette. The devices are of unknown origin containing information of unknown value. However, the potential value is great enough to be ...
- 126
2
votes
1
answer
282
views
Does BadUSB infect USB Port PCB Chips?
All answered questions seem to relate to peripherals only. Can BadUSB infect the port pcb chip within a laptop or internal desktop hub (i.e. the strip of usb ports along side a laptop or atop a ...
- 21
1
vote
1
answer
557
views
data extraction via Badusb from a "secure endpoint"
I am aware of the ducky quacky devices, however, is there a possibility of impersonating an usb input device to extract data from the target computer?
Michael Smith's defcon talk ( http://www....
- 113
1
vote
1
answer
625
views
Rubber ducky windows mitigation
So I am familiar with badusb or rubber ducky attacks, I lack possession of one currently to test any of my questions.
Essentially my question is can you mitigate rubber ducky attacks using windows ...
- 28
0
votes
1
answer
247
views
Is it possible to exploit IOT devices with Usb 'RubberDucky'? [closed]
Im kind interested , is it possible to exploit IOT devices with Usb 'RubberDucky' like Routers, servers , printers, modems with 'USB insertion'?
- 29