Slashdot Mirror

Just take a look at the USB Rubber Ducky sold by Hak5 (https://hak5.org/store). It'll emulate a keyboard and has a lot of available scripts for "penetration testing". I don't recommend going to that site from work since many businesses will treat it as a hacking site (even if the information is pertinent to your work).

oh that looks like fun. The LAN Turtle in particular looks like it has practical applications for me (I'm obviously not a pen tester) http://hakshop.myshopify.com/p...

I seriously doubt it would work against the Rubber Ducky.

You don't know shit about USB rubber ducky.

http://hakshop.myshopify.com/products/usb-rubber-ducky

Make your time.
All your base are belong to us.

http://hakshop.myshopify.com/products/usb-rubber-ducky

With an Android phone, you just need this: http://en.wikipedia.org/wiki/USB_On-The-Go

Buy one here: http://hakshop.myshopify.com/products/micro-to-micro-otg (site might be blocked at some work locations as they might think it's hacking related)

This is true, but not all phone hardware OR all versions of Android support USB OTG, in fact only handsets that are less than about 2 years old typically do. Check up on the phone and the compatible software before making any plans. Then, the question becomes is there a particular pre-built APP or even a stable API for working with the hardware I/O and to that I would suspect the answer is no (since the hardware itself is extremely scarce). Bluetooth serial is probably the only thing remotely close to this sort of application that already exists on Android, and that even has a pretty specific use case and would take some hacking to turn into universal I/O.

While it is definitely a worthy project for someone skilled in hardware and software, the "hobbyist" grade of accessibility of Arduino or Raspberry Pi put them way way ahead for someone who just wants to tinker a bit.

With an Android phone, you just need this: http://en.wikipedia.org/wiki/USB_On-The-Go

Buy one here: http://hakshop.myshopify.com/products/micro-to-micro-otg (site might be blocked at some work locations as they might think it's hacking related)

I don't know Alan, but looking at pictures of the device at http://www.hanscan.com/en/hsc-ac-it2 I'd guess that it's a Fingerprint cards RF-based placement scanner (http://www.fingerprints.com/Products/Sensors/FPC1011F.aspx) with an IR pulse detector (for example, http://pulsesensor.myshopify.com/pages/open-hardware), wrapped by a bunch of simple software apps for time-and-attendance, low-value shopping, etc.

Frankly, everyone in the business is trying to replace credit cards; how else can you envision getting 3% of every transaction made, anywhere, without having to do more than lift a finger now and then?

And there are a lot of people trying to do it:
http://www.paywithisis.com/
http://www.marketwire.com/press-release/lenovo-nok-nok-labs-paypal-validity-lead-open-industry-alliance-revolutionize-online-1755467.htm
http://www.inquisitr.com/490728/authentec-iphone-6-fingerprint-detection-and-apple-release-date-rumors/

I wish him luck.

This, perhaps?

Uh. Nope. I'm looking for a disk image I could fire up on a tiny pc (or in a VM) that'd meter wifi...

DD-WRT or Tomato then?

You could also consider rolling your own solution, if you have a particular program or suite of apps in mind; basically, just install the distro of your choice, install and configure your apps, then add them to cron.

This, perhaps?

Uh. Nope. I'm looking for a disk image I could fire up on a tiny pc (or in a VM) that'd meter wifi...

Isn't there FreeBSD or Linux disk image that'll solve this?
<WIFI> <=> [Router] < routes only to > [IP address of solution]
Where the solution does something like the standard coffeeshop login +
* Special account gets unlimited time & bandwidth
* Non-special account needs to sign up every hour & gets diminishing bandwidth (if you want to allow visitors)

Something like http://dev.wifidog.org/, but under active development?

This, perhaps?

Actually, I think I HAVE seen such devices. They present two SSIDs to the world, one of which is a guest setup that prevents LAN access and restricts bandwidth, the other behaves more traditionally with WPA2 or what-have-you.

The only problem is that I can't for the life of me remember who made it, or what model it was, or if it was actually the behavior of one of the open-source firmwares out there.

That would be the Fonera, made by FON

Incidentally, that little device also happens to be the basis of one of my favorite pen-testing tools, the wifi pineapple

1) In many cases it doesn't take long to take a laptop apart and reassemble it. The Dell technician who did that to my laptop claims he could do it in the dark/blindfolded (go figure the implications - Dell quality etc ;) ).

There are also alternative ways of keylogging. Most keyboard keys make a distinct sound when you type them. Typing q would sound different from typing w. For those that are too similar you could guess by heuristics. You can make calibration/ easier by pre-typing qwerty on it, but it is not necessary given enough text and correct guessing: https://freedom-to-tinker.com/blog/felten/acoustic-snooping-typed-information/

2) Alternatively plug a sneakier version of this in: http://hakshop.myshopify.com/products/usb-rubber-ducky
Or trick the person to do it.
See also: http://www.irongeek.com/i.php?page=security/plug-and-prey-malicious-usb-devices

Basically a usb device can install stuff and even "click through" the UAC/confirmation stuff, etc - because it can look like a usb keyboard and mouse. What it could do is nudge/jiggle the "mouse" by 1 pixel once a minute or so to make sure the screensaver never triggers. Then at a suitable time, launch the payload- which could be launching notepad/cmd, creating and saving a script and then running it.

If one of the usb ports was actually replaced with a malicious usb device that looks like a failed usb port you might not make a big issue about it. It might even be a working usb port - most large companies have standard issue laptops, so making a custom hardware USB shim for those laptops might be possible.

like this one? http://hakshop.myshopify.com/products/usb-rubber-ducky

The MiniPwner is a similar device built on a TP Link TL-Wr703N router, so you can build one for under $40. http://www.minipwner.com/

Also Hak5 has had their Wifi Pineapple available for a few years that is similar, however their MarkIV version which should come out really soon I think will trump both the Pwnie Express and the MiniPwner. http://hakshop.myshopify.com/products/wifi-pineapple