Re: Bootable Memorystick?

[Über GuidoZ <uberguidoz () gmail com>]

Agree with your answer - in fact, I've successfully booted the Live
Knoppix version from a 1GB USB stick. Took some configuring, but runs
beautifully once done.

If you can get it to work, or worried it might, it has EVERYTHING to
do with a security mailing list! Lets say I have physical access to a
secured machine. I can't crack the password, nor can I hack into a
user account, etc. No worries, I just pop in my memory and stick and
pull the power plug. Turn the system back, boot to the memory stick,
and voila! I can now navigate the file system and copy anything I want
to save. (This includes the SAM accounts from a Windows box for later
cracking.) I've even enabled full NTFS write support, as I currently
use it for virus repair and troubleshooting.

Plus, all my activity is completely undetectable, minus the computer
being off or not logged in. These things happen frequently in larger
environments... power surge for example. Also, many server systems are
left in a logged-out state for security reasons, so it's possible it
would never be detected, besides some server downtime.

A problem also arises by these memory sticks with the "Autorun"
feature enabled in Windows. Plug in a stick with a specially crafted
autorun and you can copy files without even touching the keyboard or
mouse. (I've seen a successfully written autorun copy the My Documents
folder of the currently logged in user, the SAM accounts from the
machine, and the IE favorites from the currently logged in user.) All
just by plugging in the USB Stick. There are more possibilities as
well, as imagination is the limit. Not going to say more as it's not
good to give up all my secrets just yet. ;)

~G

On Mon, 30 Aug 2004 15:32:38 +0200, Thorsten Peter
<boba () unixag-zw fh-kl de> wrote:
> why shouldnt you be able to boot to a memory stick?
> almost every vendor lists "bootable" as a feature of their
> sticks.....you simply need a board that is able to boot from USB
> device....that's it.
>
> regards
>
> Thorsten
>
> but i don't get what this question got to do with security mailing lists ;-)
>
> Samuel wrote:
>
> > Has anyone already, or does anyone think it would be possible to boot to a memory-stick instead of a floppy?  
> > Ofcourse you would have to have an 8-in-1 card reader first, but once you have one of those, each card comes up as 
> > another drive, so seemingly you could boot to one of those drives.
> >
> > _______________________________________________
> > No banners. No pop-ups. No kidding.
> > Make My Way your home on the Web - http://www.myway.com
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.netsys.com/full-disclosure-charter.html
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html


-- 
Peace. ~G

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html