4 ms·
There must be a USB gadget where you can just set any USB device ID to report to the host, so any infiltrator not wishing to give Razer money can just copy one
by bellyfullofbac 5y ago
There must be a USB gadget where you can just set any USB device ID to report to the host, so any infiltrator not wishing to give Razer money can just copy one of their USB IDs and plug the "yes I'm a Razer USB device" into a USB port.
- nimbius 5y agohttps://blog.adafruit.com/2017/11/07/generate-usb-descriptors-with-python/ https://blog.adafruit.com/2017/11/07/generate-usb-descriptor... there ya go.
- bellyfullofbac 5y agoI visited the article's linked tweet and the author's retweeted a product mention called OMG cable, that can do this (a product that looks like a normal USB cable but has things like okeylogging capabilities)
- sp332 5y agoSomeone added a payload for Bash Bunny here https://twitter.com/hak5darren/status/1429463473700888577 https://twitter.com/hak5darren/status/1429463473700888577
- c7DJTLrn 5y agoSo err... easy root access to any Windows 10 machine until this is fixed?
- bellyfullofbac 5y agoIt's probably possible to disable auto-installation of drivers, or even disable USB via software...
- cjbprime 5y agoYou can configure an Android phone to use arbitrary device/product IDs like this.
- remuskaos 5y agoDoes the phone have to be rooted for this? I've only found one app that claims to emulate any USB VID and PID on f Droid and it required rooting.
- jnwatson 5y agoYep. All it takes is to find a vulnerability in any USB device driver at all, and you have an effective evil maid attack.
- PeterisP 5y agoThe big question is can you do this over RDP, without physical access.