3 ms·
Combine this with USBdriveby, and its just too easy.
by infinitone 11y ago
Combine this with USBdriveby, and its just too easy.
- swah 11y agoHow do you mean this? Make USBdriveby download LaZagne from the internet, run it and send the output somewhere?
- echocage 11y agoOr just stick it into a usb, run LaZagne that's on the flash drive, then pull the flash drive out and walk away.
- toomuchtodo 11y agoHuh, I was thinking someone could buy up a ton of cheap usb sticks, load this on there, have it autorun, and then have the payload sent to a server over HTTPS in AWS (who is going to block HTTPS traffic to AWS? everyone runs out of there) that would catch it and notify the attacker via webhook. Then go sprinkle them around the SFBA.
- j_s 11y agoSorry for my ignorance... how does anything auto-run anymore?
- GaiusCoffee 11y agoUSBdriveby emulates a keyboard that types commands at inhuman speeds, and since keyboards are plug and play.. you can probably guess what happens next ;)
- swah 11y agoThe thing is, only keyboards and mice run without any confirmation. Pendrives normally open a explorer/finder window etc, no?
- SnacksOnAPlane 11y agoI think the point is that this is a USB drive that looks to the computer like a keyboard, so it will run without confirmation.
- DyslexicAtheist 11y agoepoxy-sealing all my USB ports right now ...