Hacking with Human Interface Devices: Weaponizing Teensy & Digispark
Nikhil Mittal explores offensive HID hacking, programming low-cost Teensy and Digispark boards to execute stealthy multi-stage post-exploitation attacks.
Summary
The Evolution of Keystroke Injection Platforms
Human Interface Device (HID) attacks leverage microcontrollers acting as standard USB keyboards to inject arbitrary keystrokes at superhuman typing speeds.
Programming Teensy, Digispark, and Arduino Micro
Nikhil Mittal demonstrates writing Arduino C code and utilizing the Kautilya payload generation framework for diverse microcontroller platforms.
Bypassing UAC and Executing In-Memory PowerShell
Mittal showcases techniques for bypassing Windows User Account Control (UAC), disabling security software, and downloading in-memory payloads directly into RAM.
Hardware Defense and Device Fingerprinting
The author reviews defensive endpoint countermeasures—including USB device ID monitoring, unauthorized device blocking, and behavioral keystroke anomaly detection.
Related talks
Village Presentations·51 min
Nikhil Mittal
Nikhil Mittal demonstrates offensive penetration testing with Human Interface Devices (HID), executing covert PowerShell payloads via Teensy microcontrollers.
Hardware Hacking Village·50 min
Federico Lucifredi
Federico Lucifredi demonstrates keystroke injection attacks, exploiting OS trust in USB HID devices to execute 1,000 WPM payloads via weaponized cables.
Hardware Hacking Village·20 min
Farith Mauro · Luis Mendoza
Demonstrates physical keystroke injection attacks and hardware implants exploiting USB Human Interface Devices.