Re: USB Drives that think they're CDROMs

[Dave Aitel <dave () immunityinc com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Anonymized posting:

kick ass.

so can this thing be used to boot systems that will boot off USB CDROM
drives, but not off thumb drives?

can i load a bootable Linux ISO on these suckers and be good to go?



Robert Wesley McGrew wrote:
> I recall a couple of messages posted here a while back about using
> USB drives that pretend to be CDROMs for their ability to autorun
> whatever nasty code you'd like to throw on there.
>
> Yesterday I picked up a SanDisk Cruzer Micro 512MB drive with "U3
> Smart" functionality. U3 is a platform for developing applications
> that can run "cleanly" from a USB drive. The way it's
> implemented, at least on this Cruzer, is that it pretends to be two
> drives at once: the large main drive, and a small 6 meg USB CDROM
> drive. This allows it to write-protect the U3 software and autorun
> it whenever you stick it into a windows machine (kind of annoying).
> After tinkering with it for a while, I've figured out a way to
> convince the update utility to write an arbitrary small ISO to to
> the normally unchangeable CDROM:
>
> http://cse.msstate.edu/~rwm8/hackingU3/
>
> Something similar is probably possible with other U3 drives. Pretty
> handy if you're looking to do this sort of
> iPod-ish-jacking/snarfing thing on the small and cheap. Or even if
> you just want to replace U3 with something more useful.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFEj/5tB8JNm+PA+iURAjAaAKCAPbbzbsz6ALmQDZoKWbHo0p8oowCg0BnB
l0l8flfa/xFO8Wd8cLyndzE=
=dN3Y
-----END PGP SIGNATURE-----

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave