I will own you in 3 seconds. Never do this!

[@elmerreyes3143]

Done it so many time when I took the CEH course, but never I imagined that you can program a USB to do this kind of backdoor connectivity. Awesome!!!

[@Motiviz]

David will throw millions of pendrive on street and follow his youtube channel from there🤣🤣🤣

[@transformationchallenge1257]

but this is great idea🤣🤣

[@JGDesigners]

hahah u r really right.

[@OMP25]

Hello David. Just recently I discovered your channel and I really enjoyed how you explain networks, you make it sound like it is very easy :). I am finishing my networking certification which I can state that I have so many to learn. At the same time trying to make netacad certifications and watching people like you to expand my horizons and knowledge. You gained a new sub. Thank you

[@THANKS_ME_LATER]

can you tell which networking certification you are doing from where

[@gamesandsoftwares1441]

this guy is so underrated , keep it up mr.david its been 24 hours since i started to learn on your chanel and i already learned alot of stuff thank you for all this work you are doing god bless

[@clickr4134]

David: “You should never just plug a random USB into your computer.” Every Dark Web Mystery Box KZbinr: “Let’s see what this dark web hard drive will do to my PC”

[@clickr4134]

Thanks for the heart David, I love ur vids

[@Lindrios]

Do you know a channel where I could watch that?

[@ilulu3812]

@@Lindrios most are fake

[@Krimson44]

@@ilulu3812 they’re actually all fake, mystery boxes aren’t sold there

[@excaliber2845]

@@Krimson44 u could probably find someone actually selling a mystery box but it's highly unlikely

[@SuperShredder2003]

haha jokes on you, my laptop is so slow that it takes like 5mins to do the most basic and simplest tasks

[@stickyfox]

I'm on an i3 iMac. Half the time my USB ports don't even work for benign devices!

[@mrri8403]

Lol jokes on you my Mac doesn’t have usb interface

[@lakesidepmp3]

@@mrri8403 Jokes on you for using a Mac!🤣

[@scorbo9000]

@@colindaniels6218 You might be 'truly safe' from the internet but therefor possibly lack the opportunity from it's full potential.

[@No-jv8cf]

JOKES ON YALL I DONT EVEN HAVE A HOUSE

[@IAMDEH]

Usually, when I find a USB drive on the floor I go to the Net Café and plug it into a random computer there just to find out if I can figure out its owner in order to contact them. But, it's interesting to know about this hack so thanks for sharing!

[@thefreedomguyuk]

That's the beauty of it ! The original attack didn't work out, so it's nice you are helping to at least get some other data ☺️

[@abdulmannan3454]

Loved the Mr. Robot reference, truly and the only realistic series in terms of hacking. Needless to say, very precise and amazing video as always. Great work!

[@davidbombal]

Thank you Abdul!

[@funcaronq5097]

@@davidbombal Hey uhh so on some comments there is a person called onion tv official saying "...you can learn more from my channel.. thanks" and their channel is very fishy, im not sure if it's a bot but just letting you know.

[@donaldnovak2092]

Trust has been a major issues in my relationship till i was referred to the best hacker on Instagram called @Vikehacks. He gave me total access into my wife's Snapchat efficiently and swiftly. Contact @Vikehacks on Instagram to get all hacking services done and remember to tell him who referred you. 💯

[@danielleschiestle2703]

I never thought I would be able to recover my account until I met Hacker_Fmt on Instagram,I tried him and recommend 💯 💯💯!

[@abdulmannan3454]

@Jamie Indeed, I'll try adding them on LinkedIn haha

[@aldi_the_flash2496]

Bro imagine hacking a computer and forcing the computer to run a rickroll for every 10 minutes

[@kebman]

While I find this idea intriguing, I did install a script that changed all the keys on my friends computer. Every time he pressed F, it said something nasty, and every time he tried to press delete, it wrote, "Haha, did you try to delete now?"

[@aldi_the_flash2496]

@@kebman INGENIOUS!

[@srtghfnbfg]

@@kebman I wrote a script that does something similar too, i called it "keyboard jammer"; it kept track of what keys were being pressed while inserting random characters instead. It wouldn't stop unless you gave it the actual correct key-combination

[@seasonfilms9375]

This is great! Thank you! Thank you for not going so fast! Really appreciate this!

[@davidbombal]

You're welcome Max!

[@emzgalante2640]

Hi David, Can you personally develop exploits, Trojan’s, Bots, Worms. As well as perform Buffer-overflows, and Ram-scraping, etc. Or can you only use prebuilt tools????

[@murkdurk8961]

When displaying the blue screen of death, put a qr code which, when scanned: downloads a payload on a mobile device?

[@untrust2033]

YES

[@aminechei8509]

that is nasty hahahaha but i like it

[@midoup20]

Jeez that's genius

[@HK-ni8wj]

just what i was thinking

[@sharulaiman7484]

so you're hacking hacking now 😂

[@richardwills7768]

first thing to do, 1, disconnect internet cable, 2, disconnect hard drive, 3 boot a live disc of any linux distro, then insert thumb drive to find out whats on it. then go into usb format and wipe the thumb drive. ..

[@maxxxxiors]

it can be just a usb killer, so it will melt your pc without any software

[@BromasenEquipo]

@@maxxxxiors that's why you test it with a library pc :)

[@bigchungus27]

Or you can just..... not plug it in?

[@zombiekiller7101]

@@bigchungus27 nah that seems logical, stay away from it

[@nullivoid]

This would be a great way to rickroll someone

[@denisbronskii5629]

That is what i was thinking

[@__jonko_with_johnko__]

got a script for that it basicly makes the computer unusable it keep turning the sounds to 100% on the speakers every second and play never gonna give you up

[@denisbronskii5629]

@@__jonko_with_johnko__ send script

[@rarminqorset3628]

Duuude.

[@gfl5189]

@@denisbronskii5629 it is ez to make a one using python

[@MrRonster500]

Excellent video. I'm taking beginning classes for cyber security and had to learn about rubber ducky and this is the best video I found so far. Thank you!

[@cosmoschikodi6867]

Hey dude, is Rubber ducky among the course unit in Cyber security class??

[@OttoLeeProductions]

my rubber ducky is on the way! great info i really like your videos & networkchuck!

[@prashantmanshrestha]

Super Clear Voice , Super Easy Explains , Simply "SUPERMAN"

[@davidbombal]

Thank you Sushant! much appreciated :)

[@donaldnovak2092]

Trust has been a major issues in my relationship till i was referred to the best hacker on Instagram called @Vikehacks. He gave me total access into my wife's Snapchat efficiently and swiftly. Contact @Vikehacks on Instagram to get all hacking services done and remember to tell him who referred you. 💯

[@Zeru64_]

-I just finished my 128 pages essay. Can you check it to see if it's ok? -Sure, just let me re-write it on my laptop. -But I can pass it to you on my thum-- -LET. ME. RE. WRITE IT.

[@thechaoticraven5059]

😂😂🤣

[@bradenharwood]

copy and paste the text into an email for me, please. Then, I'll copy and paste into word document for reading. Thx

[@mudassar1]

😂

[@woswasdenni1914]

well thats why jsu tnot plug something in isnt a good security concept. with today electronics it could be in any cable, hell already within the electronics in the laptop itself. thats why we backup, encrypt, and overwatch processes, multifactor auth and so on. in this case this is midly a hack itself. you aint get admin privileges so damage is contained as long he cant run a privilege escalation hack. i doutb he can even autorun that thing as powershell is notorious limited by default. that why he wrote a file like that, he aint have fileaccess with that and he cant use it to install a backdoor to gain such thing that easy. if ur system is uptodate the attacker would need a zero day exploit. if that thing is already on the thumbdrive it could be worth millions.

[@Raven_Media19]

@@woswasdenni1914 There are plenty of known vulnerabilities that aren’t patched.

[@OchirBFolo]

Amazing 👽, next video use it on mac and linux, i really want to see them how it works 🙏

[@davidbombal]

Glad you liked the video :) Thanks for the suggestion.

[@ner0p]

He won't, it won't

[@metalsnake00]

@@ner0p dude do you really think this is true? Put video on 7:01 and slow it down and you will notes screen cut when he "triggers on chrome on laptop" this guy is just trolling with you all :D :D :D

[@metalsnake00]

@@davidbombal nice scene cut on 7:01 which have made be believe you 110%, our hand tells it all ;)

[@ner0p]

@@metalsnake00 Well spotted.

[@tbrowntechnology]

Great info! Thank you for sharing. I'm writing a short article on account security and gave me some more food for thought for the article.

[@recursiveripples6252]

I would be thanking million times ,if I could get to see his full tutorials.. He genuinely seems too smart and knowledgeable,it's my first video hence,new subscriber and I'm surely going to try to watch all of his other videos 👍👍

[@itwsntme]

Plugging a usb stick that you found on the carpark into your computer is like drinking from an opened and half consumed bottle of Coke you found on the carpark

[@realstelios3589]

i agree lol

[@Adrien_broner]

Nah it's like finding a bag of coke on the street only to snort it and find out its fentanyl.

[@djnikx1]

Awesome as always David! Got Rubber Ducky, however I wouldn't 'toss it' on the street for someone to pick it up. Not at $45 a piece..:) If I may suggest, it would be batter to show your audience how to use an ordinary (inexpensive) 'stick' and set it up as 'Rubber Ducky'. Keep up the good work!

[@rasheedmalik6594]

Thats y i made my own piece worth 5$ but still cant drop it on the street as I am not able to host Kali Linux Server as would be a huge cyber crime and my Public IP Address will get traced in no time by the ISP :(

[@djnikx1]

@@rasheedmalik6594 no comment..:)

[@ner0p]

Plus, you would have to provide written instruction on how to disable Windows Defender before plugging the Rubber Ducky in, something David clearly forgot to mention.

[@ifonlycrolson9753]

@@ner0p Windows Defender does not flag the Rubber Ducky. It abuses the HID trust relationship with most OS

[@jaskiewicztomasz]

David, thanks for another great video. It’s an important knowledge, indeed. Nevertheless, you didn’t tell how to prevent such USB stick attacks, how to secure USB interface so even if somebody else will plug a USB stick we still can remain safe. In the end, the video is only halfway useful to me. Cheers!

[@nellermann]

Windows OS, open AutoPlay from search menu. Either disable the defaults or change them to Ask me every time. For my clients, we use security software to push these settings out and also for some devices like computers that are near people not from the business like a patient encounter room, we fully disable the USB ports. No end user can override this either. There is also methods with software that require an encryption key to exist on the USB storage device, before the computer will allow access. Meaning, only Trusted USB storage devices are allowed. I once had a doctor's office fill his USB ports with superglue to block patients from trying to insert USB sticks. I was very polite and showed how his keyboards had a USB port on their back and I would just unplug his mouse or keyboard and use those ports...

[@MisterB88]

I think here though, the device is emulating a keyboard, rather than autoplaying from usb storage. So as far as the computer is concerned it's just an innocent keyboard

[@mohammedissam3651]

That’s mean if my task manager running poweshell I’m being hacked. Thank you. Great content.

[@collinssapic8143]

why didn't i see this channel earlier until today, @david , interesting content you have have here and spreads a wide knowledge, time to check every video you've uploaded thanks

[@vyasG]

Great Video. Thank You for the wonderful content. Please consider making videos to counter attacks like these i.e. what can one do when they realise they are attacked.

[@davidbombal]

Great suggestion Vyas!

[@rossloretta923]

Send a dm to Holtlan_94 on lG sir. He’s such a great help

[@alejandroleon8705]

Okay, now i hope you make a video explaining how to kill or avoid the powerllshell process that is running on the infected laptop after pluging in the usb.

[@GameTacticszorg]

i just need to type on my kali and plug the usb on the pc target and that's it???

[@thefreedomguyuk]

There are several ways you easily can safeguard yourself. But the average user is clueless.

[@Trantarok]

Disable autostart from USB. Simple

[@alejandroleon8705]

@@Trantarok ohh ok thanks

[@Adrien_broner]

@@Trantarok How can I disable it? Help a brother out?

[@KOSHPARZ]

I really love the thought of all the power and opportunities you can have from knowing how this stuff works.. Made it through the basics and making my own website for practice, I'm not even close to scratching the surface lol overwhelming but that's exactly what the thousands of other people are thinking and quit. Wont be me, downloaded Wireshark and today my pc refused to connect to my router. Ran a troubleshoot and it fixed it, still scared me enough to uninstall but thats what pucci's do?

[@herbetone]

I'm glad my Sinclair Spectrum does not have a USB port , so I do not get tempted.😊 Great video David.

[@jalaleltabouni3810]

just amazing what you can do remotely, also it is kind of dangerous if some one track your bank account info. I will never plug unknown USB. thanks it is very useful video

[@luqmaanmarthinus6820]

Awesome content, but I think it would’ve been great if you showed us how this is done from 2 separate networks instead of doing it internally which makes it easier to get into the “remote” machine.

[@aldomargjeka4074]

Love the intro with the zebra and the video! Keep it up!

[@davidbombal]

Thank you Aldo!

[@sunnyxix]

" Let's have some fun " --- I'm scared

[@Napoo9001]

😂

[@memneophilia]

An attorney took his micro sim card out of his phone, handed it to a copy service to grab files for a print job. The attorney put the sim back in his phone, when he got to work, he plugged his phone into the work computer for whatever, and that was that! A virus when through the whole company and wiped out data on all non hidden shares. So, it is not just a random USB that you find, it is also where you are plugging in your devices into, and service IT people, what is on their sticks.

[@joeyhensley9199]

I love how you stay on topic and any tangents are short, clear, concisely explained as to how they are a part of the subject under discussion. Many channels are unnecessarily long winded with very little, if any, useful information. I like just the facts. If I don't understand, I ask questions or research things myself. Very impressive format and layout. Love your workshop.

[@kc-me6wl]

Hi David - great video as always. One thing i would love to know is the defense against these sorts of attack! If the victim was suspicious after finding a thumbdrive- would they be able to view remote connections currently running on their machine for example? To see if any remote connection sessions were happening on your computer?

[@JUNXO]

I think just ending power shell helps

[@mercian-man7116]

I would love just a tiny drop of Dave's knowledge, he's got so many weapons in is arsenal to use were and when he wants. Thank you for your videos. I recently purchased a usb win 10 boot pen drive, so I could put windows 10 on my Lenovo yoga, but keep my files ect. It now will not boot from bios to windows loading screen. I've tried Legacy mode and still now joy. Any help would be greatly appreciated. Thank you.

[@crazyphantom15]

Never quit and learn something new every day

[@kumar1400]

Perfect recommdation does exist... I will never pick up unknown pen drive or plug it.

[@davidbombal]

Good advice :)

[@thefreedomguyuk]

Well.....that's where social engineering enter the equation. Given the right incentive, you WILL plug something in. Doesn't have to look like a pen drive. Could be a USB powered desk fridge, a USB charging cable, a usb vibrator, you name it.... Actually, a novelty "usb dildo" may be worth making. You sneek into premises, leave the dildo in the canteen. I can guarantee someone just will have to see what happens......

[@bienzelynalquiza9387]

Thanks David for sharing your ideas I am not a skilled user of gadgets am still learning how to navigate. It's a big lesson on my part.

[@crunkyy1614]

thank you greatly for warning people about this, and thank you greatly for slightly teaching me how to do this.

[@applysomedamage]

I like how he has to tell us that he is controlling this laptop every 2.687 seconds.

[@freecoder522]

Now my SCHOOL is going to pay for not selecting me for the hacking competition

[@crazzyflynn2433]

Oh my

[@noone-hd1ck]

Are we just going to ignore the fact that he says 'the movie mr. robot'

[@whatif6354]

yup he must have missed the series

[@Trigormike]

It's just South African vernacular.

[@butter888]

I'd trust a usb drive more than him after that

[@TheMuddman74]

Scrolled to check for this comment before I typed the same thing. That glaring error completely made me lose interest

[@FlyR7]

He speaks a lot of Mistakes

[@justdoit9148]

Scary for those of us who have fallen victim to these things. Who knew???? Props to those who know how to do this but now I need my identity back. No I didn't plug a random USB drive in my phone. Just an idiot on these things. What do I do now???? I'm amazed at how many people are involved in this. Another great video David

[@emhyr344]

now I'm curious how to prevent that, Its a good thing a found this channel looking forward to your new videos

[@popquizzz]

Not only is it important not to use a USB device from an unknown source the same discipline should be applied to USB cords and power supplies that connect to a USB-C or other interface like a phone. It is crazy that nefarious actors actually will PWN your machine in this manner, but it happens everyday. Constantly practice EXCELLENT Cyber-Security OP=SEC. Be aware that these people do not care about you or your cause, they only care about there capabilities to make money off of your gullibility and vulnerabilities. Case in point, I asked a major hotel hosting a conference in Anaheim California I was attending if they had any USB power bricks or cords that I could use. The Front Desk is only happy to oblige and came out from the back room with a clear plastic bin containing dozens of cords and power-bricks that had been left and never retrieved by the owners. Two of those cords that I tested and one power-brick ran scripts when plugged into a Windows 10 laptop. When I dual booted into Linux one of those cords and the power-brick both ran scripts in Linux. It is crazy that people will blindly trust a connection device that is not theirs while on the road simply out of need and urgency. Always be vigilant, always verify then trust when it comes to these devices. Always use a trusted VPN when on the road. Do not plug into LAN ports in the room as these are notoriously points that can be hacked and the evidence hidden behind the wall-plate.

[@davidbombal]

Thanks for sharing! That is a great example :)

[@thefreedomguyuk]

Or, much more convenient, whenever on the road, use whatever connection you can find. Just consider it as being likely comprised. Anyway, it doesn't help you much using the hotel WiFi rather than LAN....Because I'm in the room next door to yours.

[@Words-of-encouragement.-.]

The simple fact is, most people don't even know that these types of devices exist. It's not really "crazy that people will blindly trust a connection device that is not theirs while on the road simply out of need and urgency." I mean, you said it yourself...need and urgency. If you're in a hurry it is pretty easy to get a little careless. Especially if you're unaware of the dangers that you face. The ignorance of the average person is the main reason scams and script kiddies are successful.

[@chiragscience9434]

I love the series Mr Robot it's insane 😁...

[@mariusvanwyk7796]

Very informative and scary!

[@1658iain]

Isn't that how the Iranian nuclear programme was hacked in 2010 by a thumb drive with Stuxnet on being left somewhere, found and plugged in?

[@captainfoambeard2846]

It's like: "Hey, wow. There's a bag of pills here. Let's take one." But I'm asking my boss to try this in the place I work in. See if our users, and probably visitors, do.

[@BeeBumper]

LOL I think I am studying too hard, I though David just called me out to an Internet brawl lol

[@davidbombal]

lol... I'm too old for a fight :)

[@BeeBumper]

@@davidbombal Me too David

[@mdmandy]

3 minutes into the demonstration: "Notice, I am controlling this laptop" Ohhh, I hadn't noticed... lmao Good demos tho

[@aknayak644]

David sir........i am from india....love from india....truely i am saying that sir u and network chuck(i don't know the name) and the biggest reasons for which i am fascinated for IT.....i want to become a cybersecurity guy...can u help me sir.........i have not seen teachers like u and network chuck.......hope i be a student of yours forever.....😍😍😍

[@serviodiaz4425]

Don't you want a son from him?

[@davidbombal]

Thank you! Never give up on your dreams!

[@lipsonthomasphilip8680]

@@serviodiaz4425 Why you have one son from him? WOW! THAT'S NICE. WHAT IS THE NAME OF YOUR SON? CONGRATS!! HAPPY FOR YOU FROM INDIA

[@joshchinwendu]

David has some amazing courses on Udemy. U might have to check them out. I have been following him for sometimes now.

[@aknayak644]

@@davidbombal thank u sir.....for such beautiful words.......🙏🙏

[@WarhavenSC]

I actually use a couple of those Ducky drives to help me enroll Chromebooks. Quite useful when you have to enroll a couple pallets of 300 devices all by your lonesome onesies.

[@ThingEngineer]

Great demo and PSA. Mr. Robot is a TV series, not movie.

[@Maks7594]

Note: I counted how many seconds it takes to hack when the USB drive is plugged in. 5 seconds.

[@kokowawa7975]

but did you notice that he is controlling that laptop?

[@TheGamerRedline]

Why are so many robloxians watching this video?

[@TheGreatMind55]

PLOT TWIST : I will connect that pendrive to my car's dvd

[@pantelisdonoupoglou6333]

Am I the only one who would like a in depth review of this “hacking technique” ???

[@punjabitech3659]

No am here too

[@anuradhadas909]

Me as well

[@lacricademarta]

Just buy the rubber ducky from Hak5 and load a script... that is just what he did

[@krumpkrumpkrumpkrump]

Hack the box's beginner boxes teach reverse shell

[@krumpkrumpkrumpkrump]

I meant starting points. The first 2 starting points end in two styles of reverse shell scripts, one vs Linux, one vs windows

[@adamrak7560]

for extra credit: put a small lithium battery and an esp32 pico into it, so you can also attack the wifi. wifi attacks are much less severe than the keyboard emulation attack, so putting any extra stuff on the drive is not very useful.

[@DrunkenKnight71]

thanks for the info...now, is there a video on what steps to take before you insert a usb drive?

[@speaklifegardenhomesteadpe8783]

: NEVER JUST PLUG A USB into your computer! : Watch me OWN this system in SECONDS! : Want to buy a USB from ME? 😉 🤔😂🤣😅

[@jammirmasbon6259]

Hahah it sounds like scam 😅

[@alexpotap3985]

"don't just plug any device" - Don't use any computer at all

[@appreciationtoforthesuppor4815]

I'M SO GLAD YOU GUYS ARE REAL HACKERS. YOU SEEM IN SUCH A BETTER SKILL *BRAVE CYBER* IT'S GREAT TO SEE IT

[@SisayOnline]

The reverse is also dangerous. Never plug your wifi to a random computer. A script can captures all files of a usb drive plugged into a lab computer.

[@amanpandey9181]

Will the attacker continue to have access even when the user restarts the laptop? Can the powershell be run automatically after startup?

[@federiconafria]

You can make it do whatever a user with a keyboard can do.

[@danielreinvart]

You surely heard about Task Scheduler. Attacker can create a new task which is enable with start of Windows. So yes, its possible to have an access even after restart.

[@georgedelgado8403]

and how the person get out of this?

[@Omer-tq3op]

@@georgedelgado8403 well, you can list all of the scheduled tasks with command "schtasks query", check for unusual folders and task names. Once you detect that task you can delete. In addition to that if you want to know the attacker's ip address, you can use wireshark to observe your outgoing network requests

[@cdsinfla]

@@Omer-tq3op Pretty sure if someone is picking up random USB drives, they don't know wireshark

[@chrisE815]

Last time I plugged in a random thumb drive, my centrifuges started vibrating and spinning faster... weird coincide

[@arthurmaciel9893]

Let me guess you work in some nuclear facility

[@chrisE815]

@@arthurmaciel9893 I did but the facility fell apart

[@allistair61]

Cool, I will never trust a USB drive again!

[@thefreedomguyuk]

Not until one labelled "Wages 2021" is dropped in the car park at your workplace 😅

[@glitchfox418]

My uncle who is a software engineer: Those hacks in the movies are fake Me:*Press X to doubt*

[@sueelliott4793]

I can tell that accent from a mile away, howzit from Aoteroa New Zealand. We are allowed to use USB's at my polytechnics' library. I thought that they were risking it but its a pretty honest country.

[@yolloillaci]

It took me 4 minute to realise that he is using his left hand for mouse and right hand for keyboard

[@sharulaiman7484]

probably had to use left hand because he placed that laptop on his right side

[@sluvvr]

Both handed?

[@henrywadsworth7690]

uuuh, just disable automatic execution?

[@justinspiredfallout]

This is what's confusing me. How does it autorun? Surely this isn't default Windows behaviour...

[@henrywadsworth7690]

@@justinspiredfallout it actually is, but you have to make the usb drive specifically to trick windows into executing and also you would need to have autoplay enabled.

[@henrywadsworth7690]

@@justinspiredfallout actually he is showing the stuff a "developer's pc' or at least a computer enthusiasts pc would do, if you don't know about this stuff put windows in the annoying mode my grandparents pc is: no installing or running anything not from windows store and admin privileges are non accessible.

[@justinspiredfallout]

@@henrywadsworth7690 after watching the follow up video to this one, I realized that this isn't a flash drive. Windows sees it as a keyboard so it has no issue installing it and enabling it.

[@henrywadsworth7690]

@@justinspiredfallout hmm then you would have to disable automatic driver updates in that case. personally no physical peripherals actually connect automatically on mine so yea.

[@tahaaitabdellah9444]

can u do a step by step including everything plz i'm new

[@johndelper1404]

As I understand it... the worst security breach in the USA by a foreign government was done this exact way, a thumb drive found in the parking lot, walked its way into a secure facility and was plugged into a computer hooked into the Naval Intelligence Network. The country involved was never disclosed, it's probably classified.

[@fase144]

This is a very important and revealing video. Thanks for sharing

[@iongeneral]

I'd put it into an old laptop, yes. Especially if that old laptop is disposable to me.

[@physicssimulator2656]

I guess you could still just test the USB on Kali Linux live.

[@igorthelight]

Using a VM would be a smarter idea ;-)

[@iblackfeathers]

00:35 *television show

[@davidbombal]

An Amazon Prime series?

[@Chris-q6e7l]

@@davidbombal It's a USA Network series but it is available to stream on Amazon Prime.

[@jalenmanfred2079]

Thanks for this very helpful Demonstration;)

[@tjmarx]

I always thought the point of "internet cafes/kiosks" were to plug in devices you didn't fully trust, to see what happens.

[@deadinside9256]

use to hack my math and physics teacher and get final exam sheets works well till now they still didnt know i have access for 3 years XDDD

[@mani5655]

How have you recreate a connection after the windows was restarted??? It is executing all those commands because of that PowerShell in the background. It's disconnected as soon as the power shell ends.

[@danielreinvart]

@@mani5655 there are ways

[@stefinroy6935]

@@mani5655 you could just copy the powershell file to the start up folder which would cause it to recreate it every restart

[@godnessy]

Gets control of a laptop and shows us how he can open a web browser -_-, If you want people to be afraid show them how you make a hidden keylogger or access the bank account details saved on the laptop now how you open a txt file

[@malatjimaruping4235]

😁Just discovered that the kid is wearing a South African t-shirt, my home country 😊

[@bm510]

In the grand scheme of things, this type of tool is quite rare. $50.00 and only one company sells these (on the regular market). People can build these from regular USBs but it requires some rather extensive firmware patching. 99.99999999% of USBs are safe to read. Just ensure no script was ran and halt any process that was executed.

[@jodavila16]

Hi David, that was 😲😲😲😲, thanks for the Tip!!

[@kokowawa7975]

i barely noticed that you are controlling that laptop, please remind us more

[@mrzizzzi]

lol

[@ratsec1756]

i CANNOT be the only person that hears "computa"

[@Ninjazombie-mg2yy]

I hear that

[@bedirkaya6105]

He: *kills Chrome* *after 2 minutes* He: 'lets kill Chrome again' 🤣

[@afraidof]

Superb, Easy to understand and I'm learning it for educational purpose.

[@elijahlair]

Really enjoyed it, very insightful

[@incorrect1844]

Mark Zuckerberg wants to know your location :)

[@davidbombal]

lol.. and yours :)

[@va5185]

@@davidbombal does this work even if user account control is set at max plus password security?

[@solived1239]

but how to make one ?

[@krishpradhan6222]

can you make a tutorial on how to do this attack.

[@adropofgoldensun27]

What we need to know is How to Prevent This from Happening, other than do not use a thumbdrive.

[@ali32bit42]

from the video it seems like you cant. it pretends to be a keyboard if you disable it you cant use external keyboards anymore

[@georgeworley6927]

That is why I have a computer setup that hasn't got any network connectivity. I have had clients bring me an USB Flash Drives to see what is on the drive because they know that I a safe setup. There is also autoplay settings in Windows 10 that will turn off anything from auto launching. Turn off all of the auto play settings and you can plug in any external device and nothing will run when a device is plugged into the USB port or card reader. One of the first steps I take when I set up a new computer. George

[@bruntstone6497]

"Notice Chrome..... Is DEAD."

[@coolemur976]

IE sus. FF vented.

[@jager6903]

Does anyone know how he controlled the laptop, he may have mentioned reverse shell attack not sure though

[@DergaZuul]

Definitely if you plug in USB from unknown source into Windows PC connected to internet, that is like asking to be hacked. With isolated device and OS which cannot be altered that easily (not running anything automatically on plugging in) that will not work. Some companies like Google even do intentionally leaving those USB sticks (the way to fail security training is to plug those in...)

[@xvxshawnxvx]

It's awesome that someone actually created something like this but scary at the same time lol. Also operating systems these days prevent stuff like this happening now on most of them thumb drives they have a a autorun but most computers disable it.

[@samueluzoigwe3346]

finally a channel that undersands me

[@TheNameOfJesus]

A USB stick can act as a keyboard with pre-programmed characters that it types (it can also act as a mouse, but since it can't see the screen, controlling the mouse is almost useless, unless you are really good at this.) The trick is finding a set of keystroked that can compromise your computer. That depends mostly on which OS you are running. It also depends on whether you have admin privileges, and whether you are logged in, and to which account you are logged in. Basically this is the same thing as handing over your computer to someone else (who can type really fast) for a few moments. You would never hand your computer over to a complete stranger, would you? It would have been really nice if David had explained the precise requirements for this to work, and even better if he had explained the exact keystrokes he used. Remember, a keyboard can use a USB port, and there is physically no way for the computer to tell if it's a keyboard that's connecting, or a light bulb on a USB stick, or a nuclear reactor with a custom USB cable coming out of it.

[@JustPlayerDE]

the computer actually knows what you have plugged in that depends on what the device you plug in says to the computer tho