Ethical Hacking Using USB Flash Drives as Hacking

Ethical Hacking: Using USB Flash Drives as Hacking Tools

Contact Sam Bowne n Computer Networking and Information Technology n City College San Francisco n Email: sbowne@ccsf. edu n Web: samsclass. info n 2

Warning! This is a really dangerous project. You will create a scary, lethal hacking tool and take it home with you. n This tool will steal password hashes in seconds from any Windows computer. n Be careful with it! n Like a handgun, the person most likely to be harmed by it is yourself. n 3

U 3 Drives

U 3: Software on a Flash Drive Carry your data and your applications in your pocket! n It’s like a tiny laptop! n

U 3 Launchpad Just plug it in, and the Launchpad appears n Run your applications on anyone’s machine n Take all data away with you n 6

How U 3 Works n The U 3 drive appears as two devices in My Computer A “Removable Disk” n A hidden CD drive named “U 3” n n The CD contains software that automatically runs on computers that have Autorun enabled n For more details, see http: //www. everythingusb. com/u 3. html 7

Hak 9’s Pocket. Knife

Software On The Disk Partition Pocket. Knife is a suite of powerful hacking tools that lives on the disk partition of the U 3 drive n Just like other applications n 9

U 3 Pocket. Knife Steal passwords n Product keys n Steal files n Kill antivirus software n Turn off the Firewall n And more… n n For details see http: //wapurl. co. uk/? 719 WZ 2 T

Custom Launchpad

Customizing U 3 n You can create a custom file to be executed when a U 3 drive is plugged in 12

Automatically Run Pocket. Knife The custom U 3 launcher runs Pocket. Knife n So all those things are stolen and put on the flash drive n 13

Defense

Military Bans USB Thumb Drives 15

Immediate Risk Reduction Block all USB devices in Group Policy n Disable Auto. Run n Glue USB ports shut n 16

Better Solution: IEEE 1667 Standard Protocol for Authentication in Host Attachments of Transient Storage Devices n USB devices can be signed and authenticates, so only authorized devices are allowed n Will be implemented in Windows 7 n n See http: //wapurl. co. uk/? QXASJBK 17