Jump to content

New to USB hacking, not new to programming.


Jire

Recommended Posts

Hey, how can I get started with USB hacking? I would like to autorun software via USB on Windows 7/8.

As far as my research goes, a U3 enabled USB is required...? Is this true or is there any other way to make an autorun on Windows 7/8?

I have been programming for many years I am only interested in how to get software to autorun when a USB is plugged into a machine running Windows 7/8. I don't care if administrative privilege is required. And I don't care about the software that I could run.

Link to comment
Share on other sites

Autorun was disabled in the XP/Vista days. There are ways to enable it again though. Or you can use a ducky and pull files down from the internet or run on-board scripts, etc.

With a Ducky can I pull a file from the web and execute it? Will this will work on Win7/8? About how long for a 1MB file would you say?

Edited by Jire
Link to comment
Share on other sites

That depends on the bandwidth of the computer's network. I do not have the newest ducky, I just have the teensy original ducky dev board. But you can make a script open a cmd prompt, ftp to a server, and pull down a file pretty painlessly.

https://forums.hak5.org/index.php?/topic/31512-solved-powershell-wget-execute-problem/#entry236743

Link to comment
Share on other sites

That depends on the bandwidth of the computer's network. I do not have the newest ducky, I just have the teensy original ducky dev board. But you can make a script open a cmd prompt, ftp to a server, and pull down a file pretty painlessly.

Interesting. But again, this works with Windows 7 and 8?

Link to comment
Share on other sites

The ducky or the teensy acts as a HID (Human Interface Device) aka keyboard/mouse. So if you can do it with a keyboard, it can be done with the ducky.

I've decided I'll just do stuff manually seeing that the Ducky can't really help me much given your info. Cheers ;)

Link to comment
Share on other sites

Ducky can fuzz USB stacks depending on your programming skills and ex filtrate data.

The ducky brought back auto-run attacks.

Guess it depends what your after.

Advantage of ducky is pull file from local storage. In case there is no internet!

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...