Uod Posted October 30, 2013 Share Posted October 30, 2013 Hello, i have a simple question, how could you defend against that kind of attack ? in the case disabling usb ports is not an option, assuming you run windows 7. Quote Link to comment Share on other sites More sharing options...
Lockon Posted October 30, 2013 Share Posted October 30, 2013 It depends on what the RD is being used for. Since you can choose any payload to use with the ducky, it's hard to defend against ALL exploitation without first understanding what kind of exploit is being used. As you said, the only real way to defend against any and all ducky attacks are to disable USB entirely. Quote Link to comment Share on other sites More sharing options...
no42 Posted October 30, 2013 Share Posted October 30, 2013 https://forums.hak5.org/index.php?/topic/16233-question-defences-against-the-ducky/ and #30 Quote Link to comment Share on other sites More sharing options...
barry99705 Posted November 16, 2013 Share Posted November 16, 2013 http://www.kensington.com/kensington/us/us/p/1645/K67718US/usb-port-lock-with-blockers.aspx Quote Link to comment Share on other sites More sharing options...
TheNerdinTheCorner Posted December 8, 2013 Share Posted December 8, 2013 Epoxy in the slots, maybe some JB Quick. <_< Quote Link to comment Share on other sites More sharing options...
Coalminer22 Posted January 5, 2014 Share Posted January 5, 2014 you can white list block uuid's depending if you have the time to maintain list or range of list for all your devices the uuid can be changed but it is guessing game and much more unlikely Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.