.

AutoRun from USB

<<

chrisbdaemon

Newbie
Newbie

Posts: 9

Joined: Wed Nov 07, 2007 1:05 am

Post Sun Sep 07, 2008 3:05 am

AutoRun from USB

Hey, I recently came across a very very small 8gb USB flash drive on newegg, a bit bigger than the tip of your pinky and I was trying to think about uses for it.  The security-minded side of my head came out and wondered about using it to automatically install a keylogger or some other proof of concept program like calc.exe or notepad.exe

I did some googling about Autorun.inf and apparently the "open" option in Autorun.inf files is disabled for removable storage like usb flash drives and only really works with DVD's and CD's.  Granted I'll probably never use this for any kind of malicious intentions its turned into a challenge to just see if I can find out how to do it.

So my question is.. is such a thing possible?  I heard about incidents where a program on a usb drive was renamed to picture.jpg.exe so the user opens it and the program runs  but I was hoping for no more interaction than simply plugging it in and letting it run on its own.

Any suggestions, advice or comments would be greatly appreciated.
<<

geekyone

User avatar

Full Member
Full Member

Posts: 180

Joined: Fri Oct 26, 2007 12:45 pm

Location: Peoria, IL

Post Mon Sep 08, 2008 5:44 pm

Re: AutoRun from USB

Here is a good website to take a look at for USB hacking information and programs.

http://www.usbhacks.com/category/tools/
CISSP, CEH, GPEN, GCIH, GCFA
<<

dalepearson

Sr. Member
Sr. Member

Posts: 357

Joined: Thu Nov 09, 2006 10:03 am

Post Tue Sep 09, 2008 4:26 am

Re: AutoRun from USB

If your looking to do some form of autorun feature for a USB attack, then you need to look to a U3 device, as this has a partition that acts like a CD, and you can use it to autorun apps in a stealthy fashion (assuming the system is configured for autorun).

With non U3 devices social engineering techniques would be required to make someone execute the command your looking to use. There may be other batch techniques etc.

From personal experiance, most of the hack type things regarding USB are commonly detected by AV and Spyware detectors etc, so the results are not always that rewarding.

Return to Hardware

Who is online

Users browsing this forum: No registered users and 1 guest

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software