Collaborate Disseminate
How to defend against Badusb devices that act as wireless non-Bluetooth devices on Debian?
I’ve read that the best way to block a device on Linux will be to block it using udev.
So how do I blacklist all wireless devices (non-Bluetooth tha… Continue reading Using udev to block wireless devices on Debian [migrated]
Can someone please explain to me the difference between the USB Rubber Ducky and the Bash Bunny? I understand that the Bash Bunny can emulate more trusted devices then just the keyboard like the USB Rubber Ducky, but why does that make it … Continue reading Difference in attack vectors between Bash Bunny and USB Rubber Ducky
UFDs with a Phison 2251 controller are famous for being potential BadUSB devices. It’s basically a (8051) microprocessor running application-specific firmware, which is stored on the big flash memory chip next to the controller.
Are there… Continue reading Are there any USB flash controllers without any firmware?
Does either FIPS 140-2 or FIPS 140-3 certification require USB flash drive’s firmware to be signed so that malicious computer cannot overwrite flash drive’s firmware? e.g. badusb attack.
If I buy any FIPS 140 certified USB flash drive can … Continue reading If I buy any FIPS 140 certified USB flash drive can I be sure that it’s firmware is signed?
Using Linux, is there anyway to detect that an arbitrary USB device is a BadUSB or not?
For example:
Booting a Linux into multi-user.target.
No graphical interface / tty (getty login).
Plug the USB into the PC.
Wait and see if it start… Continue reading Identifying a BadUSB using Linux
I have to use a USB stick that introduce itself as a HID device. I’m not sure if it does something fishy behind the scene or not, but I rather to think it’s not safe and take the necessary steps to keep my system safe.
My plan was to use i… Continue reading How to safely use a possible BadUSB?
Compared to a DVD live Tails Linux, how unsafe is using the USB version?
I’m trying to help a friend who for years has been mired in the laborious iterative process of remastering their own DVDs of Knoppix in the name of security.
The use … Continue reading How unsafe is a USB flash drive vs DVD for OS (Tails linux)?
I’m trying to take information that’s on Computer A, write it onto some form of persistent storage, and copy that information onto Computer B. Both will be running a relatively recent version of Windows 10. The computers may be hundreds of… Continue reading How do I securely transfer information between airgapped systems?
I have some generic USB C-to-A and A-to-C adapters that were bought cheaply.
I thought that if any of them had any advanced capabilities (other than being "dumb" adapters) such as mimicking HID (keyboard, mouse) or allowing somet… Continue reading Is it possible to verify that a USB adapter is not malicious?
I have these group policies set on my personal computer and it seems to me they should protect against Rubber Ducky attack (however I’ve read other threads that say it’s hard to protect against, hence I’d like to verify):
1. Block all devi… Continue reading Windows group policies to protect against Rubber Ducky attack