About the hacker's method in the movie

[Ed_Cypher]

In the past, I always saw some plots about hackers in movies, such as, after a USB flash drive is inserted into the computer, it can be completely controlled.
However, I have passed the OSCP exam, and I have been engaged in the network security red team for a while. I always wonder if this scenario is really feasible, just inserting the USB flash drive, without letting people click on the executable file in the USB flash drive, so as to obtain the permission of the entire computer.
I also asked some masters who have been engaged in red team for a long time, and they told me that this operation is feasible and requires specific hardware, but in reality, I have never seen such technology.

So is this really feasible? If it is feasible, is there a tutorial or something like that, such as what kind of hardware and what kind of program are needed.

enjoy Hack~

 

[CyberGod]

yeah its possible or i can say its most underrated and still reliable attack of nowadays because most of the companies spends bid budgets for their cloud security and try to monitor every single thing but still they don't focus on physical protection. so the thing you are talking about is called Hid Attack (Human Interface Device) so here the thing you are talking about isn't a USB most of the time its just a custom PCB (Printed Circuit Board) with an embedded microcontroller. that is programmed to act like a keyboard. you can perform the same thing with a SBC (single board computer) like Raspberry Pi

so how this work so basically think like this in normal malware attacks a user have to download the file from a specific link and run it on system.

yeah so how he do that of course he will use the keyboard and mouse. you can control the computer with a alone keyboard also. (not using mouse put some limitation but not that much)

now how you connect the keyboard to the system ? yeah using the usb port right? even the wireless keyboard mostly use usb dongles. so what is we already store the instructions to a device where to download malware and how to run it or what to do on the system like whatever attack hackers is planning. so when we connect this device its look like usb it acts like a keyboard and quickly do the things that has been told to do and hurray you hacked it.


(i know i yapped too much but i tried even a kid will read this he will also understand this)

 

[Ed_Cypher]

Cool, man. I just searched for the technology you mentioned and I understand the general principle. I didn't know it really existed. If I want to make something like this and make it look like a USB flash drive, do you have a good tutorial? Including recommendations for equipment to buy?

 

[Ed_Cypher]

I roughly understand the working principle of this device. I want to ask if there is a universal 3-terminal, that is, automatically identify the system after insertion. The three common terminals are Windows, Linux, and Android (after all, most USB flash drives can be inserted into mobile phones). For example, when this device is inserted into Windows, it will recognize that it is a Windows system, and then perform some operations in the Windows way, such as rebound shell, command execution, file reading, etc. Similarly, when inserted into Linux, it will also do these, and when inserted into Android, it will also perform corresponding operations for Android, etc.? First of all, is this theoretically feasible? Secondly, if it is feasible, what kind of knowledge do I need to master? How should I do it?

 

[Ed_Cypher]

yeah its possible or i can say its most underrated and still reliable attack of nowadays because most of the companies spends bid budgets for their cloud security and try to monitor every single thing but still they don't focus on physical protection. so the thing you are talking about is called Hid Attack (Human Interface Device) so here the thing you are talking about isn't a USB most of the time its just a custom PCB (Printed Circuit Board) with an embedded microcontroller. that is programmed to act like a keyboard. you can perform the same thing with a SBC (single board computer) like Raspberry Pi

so how this work so basically think like this in normal malware attacks a user have to download the file from a specific link and run it on system.

yeah so how he do that of course he will use the keyboard and mouse. you can control the computer with a alone keyboard also. (not using mouse put some limitation but not that much)

now how you connect the keyboard to the system ? yeah using the usb port right? even the wireless keyboard mostly use usb dongles. so what is we already store the instructions to a device where to download malware and how to run it or what to do on the system like whatever attack hackers is planning. so when we connect this device its look like usb it acts like a keyboard and quickly do the things that has been told to do and hurray you hacked it.


(i know i yapped too much but i tried even a kid will read this he will also understand this)

Look this bro:

Cool, man. I just searched for the technology you mentioned and I understand the general principle. I didn't know it really existed. If I want to make something like this and make it look like a USB flash drive, do you have a good tutorial? Including recommendations for equipment to buy?

I roughly understand the working principle of this device. I want to ask if there is a universal 3-terminal, that is, automatically identify the system after insertion. The three common terminals are Windows, Linux, and Android (after all, most USB flash drives can be inserted into mobile phones). For example, when this device is inserted into Windows, it will recognize that it is a Windows system, and then perform some operations in the Windows way, such as rebound shell, command execution, file reading, etc. Similarly, when inserted into Linux, it will also do these, and when inserted into Android, it will also perform corresponding operations for Android, etc.? First of all, is this theoretically feasible? Secondly, if it is feasible, what kind of knowledge do I need to master? How should I do it?

 

[CyberGod]

Look this bro:

Cool, man. I just searched for the technology you mentioned and I understand the general principle. I didn't know it really existed. If I want to make something like this and make it look like a USB flash drive, do you have a good tutorial? Including recommendations for equipment to buy?

I roughly understand the working principle of this device. I want to ask if there is a universal 3-terminal, that is, automatically identify the system after insertion. The three common terminals are Windows, Linux, and Android (after all, most USB flash drives can be inserted into mobile phones). For example, when this device is inserted into Windows, it will recognize that it is a Windows system, and then perform some operations in the Windows way, such as rebound shell, command execution, file reading, etc. Similarly, when inserted into Linux, it will also do these, and when inserted into Android, it will also perform corresponding operations for Android, etc.? First of all, is this theoretically feasible? Secondly, if it is feasible, what kind of knowledge do I need to master? How should I do it?

for that you need to program your pcb like this most of the time you already have planned what system you gonna program your script for.

yeah this thing can work on linux, android and windows.

you can buy a already readymade device named usb hak5 rubber ducky , or can go for more advance option named omg plug by hak5


or you can program your own rubber ducky on devices like digispark attiny85 arduino using Arduino IDE

if you are willing to contribute in forum by buying a account upgrade like Satan or Lucifer . i can write a whole series for you

 

[kvsk485]

What about the USB keys that burns your local port by overloading charge?

 

[Ed_Cypher]

for that you need to program your pcb like this most of the time you already have planned what system you gonna program your script for.

yeah this thing can work on linux, android and windows.

you can buy a already readymade device named usb hak5 rubber ducky , or can go for more advance option named omg plug by hak5


or you can program your own rubber ducky on devices like digispark attiny85 arduino using Arduino IDE

if you are willing to contribute in forum by buying a account upgrade like Satan or Lucifer . i can write a whole series for you

Really? I have bought a Raspberry Pi 5 8G, can it be used? Or does it have to be HK5? I want to make a USB flash drive that can be used on Linux, Windows and Android, and can support independent development.
For example, when it is inserted into Windows, I will get a rebound shell, file management, and so on.
When it is inserted into Linux, it will rebound shell/or do other things.
When it is inserted into Android, I can still operate the Android machine like the Android module in msf, get SMS, GPS and other functions similar to msf.

I want to ask, what do you mean by writing a set for me? Do you mean to write a customized set for me, or give me the information in this regard, and I need to learn it myself? Or will you assist me in making this thing throughout the process?

 

[CyberGod]

I used pico yeah no need ti get hak5 until you’re just doing it for testing purposes

I can write a whole series for you. Like a step by step guide