Questions tagged [usb]

an industry standard used for connecting to and powering peripheral devices (keyboards, mice, cameras, printers, external hard drives, etc) from a computer or other USB capable device.

Filter by
Sorted by
Tagged with
1
vote
1answer
52 views

Is disabling USB data transfers still useful to protect a patched W10/11 workstation?

Assuming a threat actor would not have a huge amount of resources or is a script kiddie (he could not write a 0-day but he could buy a rubber ducky); in a Windows 10 environment, if the workstation is ...
0
votes
1answer
84 views

Is it safe to clone Tails to a used USB?

If one has a USB stick, originally from a trusted source and without hacked firmware, but one has used this USB stick with an unsafe system, then can it safely be plugged it into a Tails OS system and ...
0
votes
0answers
75 views

How does USB device run exe program when plugged in

Based on my research the best USB device can do is to trick the OS believing its device type A while it is device type B. However it can never auto install a custom driver or auto execute a program/...
0
votes
1answer
62 views

Will secure boot prevent any non signed firmware from running?

Wonder if secure boot can protect my computer from usb drives with infected firmware after Debian os is booted ?
0
votes
0answers
51 views

How easy is it to hack a laptop using android phone assuming it's firmware is infected?

Wonder about if it is possible for an android device with infected firmware and fully controlled by hacker to compromise my computer remotely (assuming hacker has already locally flashed a different ...
4
votes
2answers
143 views

Can an SD card (or microsd card) emulate an HID device?

In a similar manner to a usb rubber ducky, can one use an SD card to emulate an HID device (such as a mouse or keyboard)? If so, how could this be implemented, and how can it be protected against?
1
vote
0answers
82 views

What traces are left on a flash card reader after using it?

If one uses a micro SD card with a card reader on Windows, or on Linux, or on Android, would there be a way to forensically determine on which computer the card reader was used? I know OS can log ...
0
votes
0answers
22 views

If a malware infects a usb, will formatting remove it? [duplicate]

My computer probably had malware. Decided to install linux and do a disc wipe using a linux distro called Pop!_OS (ubuntu based) Can a piece of malware/virus inject itself into an ISO According to the ...
0
votes
3answers
157 views

USB with partition that runs .exe program. - How to remove it

I have receive a USB, but I noticed that as soon as I connected it to my computer, a video of an organization is shown. Its like an informative video, it makes me think about nothing dangerous. But... ...
0
votes
1answer
189 views

Can malware go from a computer to an android phone

My computer (probably) had malware, and during that time I connected my phone to it (via USB) for transferring files, using as midi, etc. Is there a chance the malware could've spread from the ...
2
votes
1answer
110 views

If I buy any FIPS 140 certified USB flash drive can I be sure that it's firmware is signed?

Does either FIPS 140-2 or FIPS 140-3 certification require USB flash drive's firmware to be signed so that malicious computer cannot overwrite flash drive's firmware? e.g. badusb attack. If I buy any ...
3
votes
3answers
336 views

Identifying a BadUSB using Linux

Using Linux, is there anyway to detect that an arbitrary USB device is a BadUSB or not? For example: Booting a Linux into multi-user.target. No graphical interface / tty (getty login). Plug the USB ...
1
vote
1answer
230 views

Tricking a windows 10 computer into thinking a USB being plugged in is a mouse for code execution [closed]

Is it possible to "trick" a Windows 10 PC into thinking a flash drive is a mouse to execute code on the machine? If so, how? Note: I'm not trying to do anything malicious. All of this is ...
1
vote
2answers
186 views

How to safely use a possible BadUSB?

I have to use a USB stick that introduce itself as a HID device. I'm not sure if it does something fishy behind the scene or not, but I rather to think it's not safe and take the necessary steps to ...
0
votes
0answers
26 views

how to check a device (mouse, USB-VGA, USB-HDMI) contains no malware [duplicate]

I got my fingers seriously burnt with some garbage bought online, which was a USB-3.0 to VGA cable. It contained a driver that requested an install, that led to my computer being unstable and a few ...
0
votes
1answer
243 views

Check USB mouse for malicious code

When I first used this mouse and keyboard, my PC died shortly after. Today I used it and it somehow corrupted my Linux. I once put a clean Linux on a laptop and plugged this mouse in and left it, ...
1
vote
2answers
643 views

Parrot OS live vs Tails [closed]

Is Parrot OS as secure as Tails? Tails is running from USB, loading to RAM so it means that it doesn't use local computer storage. After each start, Tails starts a new session and doesn't store files ...
0
votes
0answers
43 views

Wondering if a USB dongle for gaming controller could have malware installed [duplicate]

I purchased a usb gaming controller used. It has a usb dongle that plugs into the PC and a I assume its bluetooth. Is it possible for the USB dongle to contain a keylogger that starts up when I plug ...
2
votes
1answer
282 views

How do I securely transfer information between airgapped systems?

I'm trying to take information that's on Computer A, write it onto some form of persistent storage, and copy that information onto Computer B. Both will be running a relatively recent version of ...
1
vote
2answers
131 views

Are there any risks involved with plugging smartphones into Windows 7-10 computer's USB ports?

When you plug a smartphone into a USB port on a Windows 7-10 computer, often a small message box pops up on the Windows device indicating that drivers are being installed. This happens automatically ...
0
votes
0answers
51 views

Is it possible to verify that a USB adapter is not malicious? [duplicate]

I have some generic USB C-to-A and A-to-C adapters that were bought cheaply. I thought that if any of them had any advanced capabilities (other than being "dumb" adapters) such as mimicking ...
0
votes
1answer
94 views

Connecting Pendrive used by multiple users

Tried looking for it but didn't find solution. So basically every once in a while we are getting from our kindergarten an USB pendrive with photos. I am trying to find a way to safely copy the files ...
5
votes
1answer
326 views

Windows group policies to protect against Rubber Ducky attack

I have these group policies set on my personal computer and it seems to me they should protect against Rubber Ducky attack (however I've read other threads that say it's hard to protect against, hence ...
2
votes
0answers
126 views

Does the USB connection have to be trusted when using Yubikey CCID/PIV?

I use a Yubikey in PIV/CCID mode. The PIN is sent from the host computer via automated script and unlocks the Yubikey PIV smartcard. In this mode, is it essential that the USB connection is trusted? ...
3
votes
1answer
644 views

Is bluetooth keyboard more secure than USB keyboard for a malicious firmware?

There are some threads talking about Bluetooth keyboard security. But I have a different concern. I will only need 4 keys from an external keyboard, Home/End/PageUp/PageDn keys. Because I use them a ...
3
votes
2answers
186 views

How can I find out if a unwanted file I got on my USB Stick in the university lab is harmful? What do do now?

I'm using Ubuntu, I detected a file called "yveqsh93.exe" after plugging my USB into a heavily used Windows XP machine in one of the labs of my research group at university (Controlling some ...
0
votes
0answers
99 views

To prevent BadUSB attacks - can't you just block a connection to the specific vulnerable microcontrollers?

Since only a select amount of amount of microcontrollers in the USBs can be reprogrammed, isn't it just possible to block that certain kinds of microcontroller containing devices?
1
vote
0answers
95 views

Aren't these "new" self-programmable gaming mouses a new security threat? [duplicate]

I have recently bought one of the recent "best" USB gaming mouses out there. The thing that is bothering that the marketing material says it contains a self-programmable computer embedded in ...
8
votes
2answers
3k views

Can BadUSB be avoided by looking at the shapes and the controller model inside it?

I'm an average user. I don't take part or have any dangerous jobs. I know that there is no fixed solution for this type of attack. However, I think USB is still become common devices for average user. ...
1
vote
2answers
322 views

I just found out about BadUSB. Should I worry about it although I bought my USB from official stores?

I want to prevent malicious program accessing my PC via USB. My thread is as follows: I'm just a regular citizen with a non-dangerous job. However I live in a country that didn't care about data ...
0
votes
0answers
177 views

Can I view the format history of a usb key?

Is there a way to view when changes were made to a USB key, such as when the USB key was formatted and/or when some files were transferred? I have seen this previous stackexchange question File system ...
1
vote
0answers
103 views

Protect USB from reading by using PC identity

Is there any way (software or hardware solution) to create a usb drive that can make its contents readable only on specific PCs using their hardware serial numbers?
1
vote
0answers
80 views

Can USB-C be restricted for display only (i.e. no data transfer)?

I want to allow users to connect their company mobile phones to company tablets for display only using USB-C. These are windows tablets. Is there anyway of restricting the USB-C to only allow display?...
0
votes
1answer
647 views

Can a Logitech wireless headphone usb receiver be infected?

So I think they call them “dongles”? The usb wireless receiver that’s plugged into your computer? Can they get virus from a computer that has been infected? I imagine it’s no more vulnerable than say ...
0
votes
1answer
90 views

Are Thunderbolt-enabled computers without Thunderbolt ports vulnerable to Thunderspy?

Could these two attack scenarios exploit the recently publicized vulnerability? Using a Thunderbolt adapter like an USB-to-Thunderbolt adapter on a computer without any Thunderbolt port Temporarily ...
1
vote
2answers
258 views

Does the WP(Write Protect) pin of a USB flash memory controller prevent tampering with its firmware?

Does WP(Write Protect) pin of a USB flash memory controller prevent tampering with its firmware? I want to have an USB stick that I can make it read-only and insert it in any untrusted PC without ...
-1
votes
2answers
251 views

Hide reverse shell window launched with HID attack

GOAL: the attacker insert into a victim's laptop an USB which act as a keyboard. The payload opens a terminal, executes a reverse shell and hides the terminal. PROBLEM: the tests I did locally (...
0
votes
1answer
98 views

Does this kind of USB "port knocking" exist?

For security reasons in public spaces administrators choose to disable the USB interfaces. Is there a possibility for having something like port knocking on disabled/sleeping USB interfaces? Port ...
0
votes
1answer
107 views

Why do people warn of putting unknown USBs in your device [duplicate]

People keep saying never put a random USB in your device because it could ruin it with a virus. Hackers are able to program USBs to automatically run a virus when it is put in a device. So I decided ...
3
votes
3answers
2k views

How to check if USB device isn't malicious?

Let's say I've got a generic, cheap mouse. It's a USB-device. Any USB-device may contain memory, so how to know if the manufacturer didn't embed any memory with malware software in a device? (on ...
1
vote
1answer
176 views

Mobile Hotspot, Smartphone or Router?

I am using a laptop with dual boot Windows and Ubuntu. In addition, I am having another Linux distro installed on a usb thumb drive and using it only for certain things. Generally speaking - if ...
0
votes
1answer
159 views

USB 3.0 write protection switch question

I bought a USB 3.0 flash drive with a write protection switch for use with a Linux live distribution. My question is, once the OS is installed and running, I tested it and I can still install programs ...
2
votes
2answers
212 views

USB device security in Windows

Am I really understanding things correctly if I claim that: If a USB stick/device is inserted into a PC running Windows, currently in "lock screen" mode (that is, somebody has pressed WinKey + L), it ...
2
votes
3answers
698 views

Secure USB (unique identifier)

There is a requirement for an unattended, publicly-accessible machine that I have to only allow company-approved USB devices (e.g., USB mass storage, keyboard, mouse, Bluetooth, etc.,) and block all ...
1
vote
0answers
161 views

Where are the drivers stored on usb receivers? [closed]

I am wondering where the firmware / driver is stored on these devices? If it cannot be used as a storage device, how could it possibly store any firmware for itself? How could I access these "files"? ...
1
vote
0answers
154 views

How to analyze a USB device of having possibly malicious capabilities?

So I recently ordered a chinese external USB card and I would like to find out whether it has some hidden functionality, which might become malicious. It has buttons integrated in it so Linux using ...
1
vote
0answers
65 views

Standards restricting bluetooth/usb access?

AFAIK in most OSes an app is given access to USB and Bluetooth and it's fairly blanket access. I believe maybe iOS now has per app Bluetooth access controls but if you give an app bluetooth access it ...
3
votes
1answer
374 views

Is there a safe way to use external display with USB Type-C laptops?

Somewhat related to Is malware or screen capture possible with iMac as external display?, where we investigate the possibility of a DMA attack through DisplayPort, nowadays, many machines don't even ...
1
vote
0answers
198 views

What are the main attack vectors on USB storage drives on Windows 10?

I am trying to understand what generic risks are there in using my thumb drive to transfer files to some untrusted machine and plugging it back to my Windows device. Specifically I am interested in ...
1
vote
0answers
418 views

How do I know a USB Bluetooth Adapter is safe to use? [duplicate]

I've found several extremely cheap USB Bluetooth options and, while the reviews say they work, I am skeptical of them because they are so cheap/have no name brand recognition. Here is the main one I ...

1
2 3 4 5