Jump to content

NOOB QUESTION


sam1967
 Share

Recommended Posts

a while back someone asked me to charge his usb mp3 player on my pc by sticking it in the usb port,

is it possible that the usb drive could slurp information automatically from my pc withoit any intervention ?

or would i have to run a program such as a batch file from the deivce before it could slurp data from my computer.

Link to comment
Share on other sites

You'd need software (or a simple script) on your machine, the MP3 player wouldn't need software on it or anything. The script you'd need would poll for new drives, when a USB drive (or a drive with a drive letter usually used for USB devices) is inserted, it would just copy everything off of the drive.

Link to comment
Share on other sites

hi im still confused

there was no sw on my computer

i just plugged his usb mp3 player into my usb port

so the question is:

could a program be run automatically in the mp3/usb player to copy data from my hard drive without any intervention on my behalf (such as installing sw etc ) ?

Link to comment
Share on other sites

hi im still confused

there was no sw on my computer

i just plugged his usb mp3 player into my usb port

so the question is:

could a program be run automatically in the mp3/usb player to copy data from my hard drive without any intervention on my behalf (such as installing sw etc ) ?

Maybe, if the MP3 player has some kind of U3 capability.
Link to comment
Share on other sites

so the answer is basically yes,

i thought it was a bit odd that he asked me to charge his mp3 player using my pc,

but i thought there was no way he could hack me .

lol..

this was a few years ago and ive thought about it since and realised he was up to no good,

now i know what he was up to.

ah well fool me once

Link to comment
Share on other sites

I think the answer is no he couldn't have hacked you unless he had an autorun on his mp3 player and you actually clicked on the drive to like view the contents. But just plugging it in would not run any kind of scripts unless as majk said it had some kind of U3 capability which I don't know of any as of yet. 8)

Link to comment
Share on other sites

spare me the bull.shit jester

i just read several article by maxdamage et al explaining exactly how this could be done without any user intervention,

im buying my self a u3 cruzer right now on ebay and wil try it out myself,

i now know how easy it is to do this attack,

i

Link to comment
Share on other sites

Wow not sure where that one came from just trying to help out. Damn as far I knew there had to be some sort of intervention I have not seen a way yet work without user intervention on a non U3 device. So point me to these workin examples so I learn from them.

Link to comment
Share on other sites

it was 18 - 24 months ago.

cant remember exactly.

he TOLD me it was an MP3 player but it just looked like a USB stick to me . but many MP3 players do,

it might well have been a U3 stick,

i wasnt paying any attention you see,

it was only afterwards i had the suspicion he hacked me,

so would it have been TECHNICALLY possible to perform this switchblade hack 18 - 24 months ago ?

i dont even see this guy hanging around anymore,

im just curious,

Link to comment
Share on other sites

it was 18 - 24 months ago.

cant remember exactly.

he TOLD me it was an MP3 player but it just looked like a USB stick to me . but many MP3 players do,

it might well have been a U3 stick,

i wasnt paying any attention you see,

it was only afterwards i had the suspicion he hacked me,

so would it have been TECHNICALLY possible to perform this switchblade hack 18 - 24 months ago ?

i dont even see this guy hanging around anymore,

im just curious,

Well from your description it certainly is a possibilty.
Link to comment
Share on other sites

A.) To my knowledge, holding down shift disables autorun when you insert things (correct me if I'm wrong) so there's some future reference for you.

B.) More reference for the future, don't be an ass to ppl on the forums like you were being to Jester a few minutes ago, flaming people for trying to help you makes you an official n00b.

Link to comment
Share on other sites

USB MP3 players aren't U3 devices usually, but that doesn't mean there isn't a danger of it.

Its very possible that an MP3 player can be hacked to function like U3 when plugged in to a USB port. There are hacks out there that allow any removable media device to function as a CD-Drive, thereby having an automatic autorun and running any payloads.

In addition, MP3 players that serve as disk drives will have autorun capabilities on Windows XP Sp2 and greater.

So the possibility is there for the MP3 player to be malicious, but the probability of it is quite low.

Link to comment
Share on other sites

  • 4 weeks later...

why do you care do you have passes to porn sites or something unless you let him on your pc or if you dont have any protection like me then nothing bad is going to happen and this whole delima on the hacksaw i know its badass and stuff but you act like he is still trying to fuck you over(exscuse my french) but i dont see why you would worry really i mean if you change your passwords atleast once a month then your good to go

take note:i never change my passes and i have no protection AT ALL

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...