t510 Making BadUSB Work For You Adam Caudill Brandon Wilson

[@TimHoekstra]

So this turns every vulternable usb device into some kind of rubber ducky?

[@LilKing420s]

interesting vid! thanks for post!

[@ContinentalVisaOverseas]

Can anybody help me to access windows 7 kiosk mode on lock screen by keyboard shortcut?

[@hongyen324]

Wait, I cant recall from the beginning but can you do this to any usb?

[@andersrabenhansen5017]

Yep.

[@DavidFilskov]

Wouldn't a "simple" OS update protect against this?

[@NathanChambers]

Not if the USB is using boot-sector like injection, the OS isn't even loaded yet, so by the time windows, linux, or mac is booted, the system is "screwed".

[@DavidFilskov]

Ah yes, but I meant in normal situations like when someone plugs a thumb drive into a colleague's PC.

[@samerhashoul]

Hey, I am soory bothering you can I have an invitation for inbox ?

[@DavidFilskov]

Do you know someone who has access to Inbox?

[@Anasalshami88]

I'm going to design my own badusb

[@WhyNotPulse]

could a fix be just updating virus protections to detect the malicicous firmware

[@andersrabenhansen5017]

This is an issue that needs to be handled by the OS.

[@NicholasElliott]

Pulse Edits The USB pretends to be a keyboard and essentially does everything a keyboard could do to infect a computer e.g. going to malicious websites and purposefully downloading/installing malicious software. Additionally, the USB could do a few keyboard commands to erase your data. Virus protection cannot protect from this.

[@jaderolleraj7599]

He just spent 24 minutes telling people how to use a USB thumb drive to hack other peoples computers which i think should make him criminally liable when people start doing it.

[@christi_L]

You are sadly mistaken. Without people like this, there is no review process of consumer products. Think of this guy and people like him as an unpaid (or sometimes paid) regulatory agency like the FDA. Typically before exploits are released in forums like this, researchers inform manufacturers of the security vulnerability and provide sufficient time for them to fix it. It is only after they fail to do so that they are made public, which is done as a way to force them to provide a fix, or for end users to change their behavior.

[@MrCougar1825]

You guys must not understand at all it's doing what windows had allowed for years it's doing something you would so if Microsoft even could fix it in windows they would have to take away stuff we could do on are own Os and if this moves to ssd we are fucked passwords can be hacked in under a min noting is safe unless it's not on line and with you