BadUSB - On Accessories that Turn Evil
summary
Off-the-shelf USB controllers are reprogrammed to change device class: leaked firmware updaters and Wireshark traces let the team reverse engineers 8051 firmware and inject C/assembly via custom linker scripts; two controller families take ~2 months and ~1 month to crack. Reprogrammed sticks emulates keyboard and Ethernet to install malware, self-replicate across Windows and Linux (steal sudo password via LD_PRELOAD for root), and boot as a pre-OS rootkit — demos work end-to-end.
AI-written summary · about
chapters (20)
- 0:00Intro
- 1:03Demo
- 2:54USB Basics
- 4:18Device Identification
- 6:29Device Registration
- 8:24Update Process
- 14:00New USB Stick
- 14:40Linux Notebook
- 15:10Linux USB Stick
- 16:17Password Exploit
- 17:45Other USB Devices
- 18:47USB3 Controller
- 20:47Second Idea
- 22:08USB Trust
- 23:29Cloud Environment
- 28:14Boot Sector Virus
- 30:04USB Controller Virus
- 34:15Defenses
- 40:02GSM Rainbow Tables
- 42:59Questions
related talks
47mTrojanizing Hardware: Be Careful What (USB) You Plug In and Where
39mBackdooring Hardware Devices by Injecting Malicious Payloads on Microcontrollers
51mA Measured Response to a Grain of Rice
27mCracking With Automated USB Fuzz
43mThe Tao of Hardware the Te of Implants
01h 46mTutorial: Introduction to Reverse Engineering
26mUSB Snooping Made Easy: Crosstalk Leakage Attacks on USB Hubs
44m"Attacking industrial remote controllers for fun and profit"