Cracking With Automated USB Fuzz
summary
A modern USB fuzzing platform called USB Studio uses a microcontroller with two USB ports and a self‑powering rail to keep fuzzing after host crashes, drives mutations with genetic algorithms and Lua scripts, and feeds crash feedback back into the engine. It simulates a Microsoft UVC camera and demonstrates a Windows Hello bypass using a single infrared image, and causes BSOD/DoS crashes on Windows and Ubuntu while claiming substantial reduction in fuzz time.
AI-written summary · about
chapters (15)
- 0:00Introduction and audience warmup
- 1:58Why USB fuzzing matters
- 3:27USB protocol basics
- 6:15USB device descriptors
- 7:24USB data transfer types
- 8:27Introducing USB Studio
- 9:32USB Studio architecture
- 11:21USB protocol layers
- 13:08Fuzzing with descriptors
- 14:14Mutation rules and corpus
- 15:41Fuzzing data encapsulation
- 16:02Windows Hello bypass demo
- 18:50Future plans for USB Studio
- 20:27Live BSOD demo
- 21:18Q&A session
related talks
25mDon't Trust Your USB! How to Find Bugs in USB Device Drivers
34m1-Click-Fuzz：Systematically Fuzzing the Windows Kernel Driver with Symbolic Execution.
36mUSB Arsenal for Masses
46mFor The Win: The Art Of The Windows Kernel Fuzzing
37mPower Management and USB...
53mFuzz Testing for Fun and Profit
45mBadUSB - On Accessories that Turn Evil
01h 15mMake your programs more reliable with Fuzzing