Security Basics mailing list archives

Re: Programmable USB device that can send keystrokes?


From: Matt Bragano <maestro485 () comcast net>
Date: Mon, 07 Apr 2008 00:34:37 -0400

I assume you want to take advantage of the auto-execute property on many Windows machines. Unfortunately, many Windows machines are configured to automatically execute a given program when a disc or USB stick is inserted even though it isn't the most secure behavior. However, the goal you are describing really isn't possible. Any program that is executed on a given machine must be loaded into memory one way or another. Apart from writing some low level assembly, you're likely going to have to employ some other system libraries to initiate a mouse movement event in whatever code you write. (Of course, even the assembly code will be 'loaded' on the computer, but possibly more discreetly.) Despite this, auto-execute can still be quite useful as a security test. Write some "malicious" code, toss the USB stick in the machine and see what happens.

Ali, Saqib wrote:
For some security testing, I am looking for a USB device that can send
pre-programmed key strokes when plugged-into the USB port. Any
suggestions?

I want something that doesn't require a software/script to be loaded
on the computer.

Something along the lines of WiebeTech's MouseJiggler <
http://www.wiebetech.com/products/MouseJiggler.php >, where it
justsends the mouse commands without loading any software.

Or maybe a programmable keyboard that can send keystroke as soon as it
is connected, without requiring any software/script to be loaded.
Obviously this device would require a built-in processor and some
memory.

saqib
http://doctrina.wordpress.com/



Current thread: