Programmable HID USB Keystroke Dongle
Adrian Crenshaw explores programmable hid usb keystroke dongle at DEF CON 18, examining physical-security and practical defenses.
Summary
Architecture and Background
Adrian Crenshaw - Programmable HID USB Keystroke Dongle: Using the Teensy as a Pen Testing Device The Programmable HID USB Keystroke Dongle (PHUKD) is a small device based around the Teensy microcontroller development board.
Vulnerability Analysis
It allows users to program in keystrokes and mouse macros that can execute when the device is plugged in, after a set time, or when certain environmental conditions are met (light, noise, temperature, etc.) This device can be used as a replacement for a U3 hacksaw, as a device left behind to execute commands when someone with elevated privileges is likely to be logged in, or give as a Trojan device to unsuspecting targets.
Exploitation and Demonstrations
Much pwnage should ensue.
Remediation and Defensive Strategies
Adrian Crenshaw has worked in the IT industry for the last twelve years. He runs the information security website Irongeek.com, which specializes in videos and articles that illustrate how to use various pen-testing and security tools. For copies of the slides and additional materials please see the DEF CON 18 Archive here:
Related talks
Main Stage·19 min
m010ch
An analysis of physical security flaws and key duplication vulnerabilities in municipal Knox Box rapid entry systems.
Main Stage·45 min
Brandon Wiley
Brandon Wiley details defeating Internet Censorship with Dust, the Polymorphic Protocol Engine BRANDON WILEY RESEARCHER, STEP THREE: PROFIT.
Main Stage·45 min
Brendan O'Connor
Brendan O'Connor details stalking a City for Fun and Frivolity BRENDAN O'CONNOR Tired of the government being the only entity around that can keep tabs on a whole city at once.