[Discuss] code for hacked USB drive (BadUSB) released on Github

Richard Pieri richard.pieri at gmail.com
Mon Oct 6 12:33:27 EDT 2014


On 10/6/2014 11:13 AM, Drew Van Zandt wrote:
> It is, however, not difficult to have a USB device reset itself and then
> change its answer when re-initialized.

USB doesn't work that way. Neither does BadUSB. If you flash a BadUSB
custom firmware to a USB device then that device becomes what you flash
it to be. If you flash it as an HID payload injector then it is a human
interface device regardless of what it was when it was assembled at the
factory.

Rubber Ducky is a different thing entirely. It's actually a full
computer on a thumb-sized circuit board. As such it runs a software
stack that can emulate different device classes and present virtual mass
storage devices to hosts. The same thing that Android devices do.

-- 
Rich P.



More information about the Discuss mailing list