RE: Programmable USB device that can send keystrokes?



I think most people with any engineering/computer background could
easily take something like this device from Thinkgeek and do what he is
wanting to be done.

http://www.thinkgeek.com/gadgets/electronic/a11e



Thanks,

Jerry W. Gamblin



-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx [mailto:listbounce@xxxxxxxxxxxxxxxxx]
On Behalf Of Wesley McGrew
Sent: Monday, April 07, 2008 11:04 AM
To: Matt Bragano
Cc: security-basics
Subject: Re: Programmable USB device that can send keystrokes?

I'm pretty sure that this isn't what he's asking for. To the best of
my understanding, he's looking for something that appears to the host
as being a USB keyboard, only instrumented to send pre-recorded
keystrokes. I don't see why this wouldn't be possible (you could
probably knock together a not-small prototype with a microcontroller
and the guts of a USB keyboard), but I'm not aware of any products
than can be purchased right now.

On Apr 6, 2008, at 11:34 PM, Matt Bragano wrote:

I assume you want to take advantage of the auto-execute property on
many Windows machines. Unfortunately, many Windows machines are
configured to automatically execute a given program when a disc or
USB stick is inserted even though it isn't the most secure
behavior. However, the goal you are describing really isn't
possible. Any program that is executed on a given machine must be
loaded into memory one way or another. Apart from writing some low
level assembly, you're likely going to have to employ some other
system libraries to initiate a mouse movement event in whatever code
you write. (Of course, even the assembly code will be 'loaded' on
the computer, but possibly more discreetly.) Despite this, auto-
execute can still be quite useful as a security test. Write some
"malicious" code, toss the USB stick in the machine and see what
happens.

Ali, Saqib wrote:
For some security testing, I am looking for a USB device that can
send
pre-programmed key strokes when plugged-into the USB port. Any
suggestions?

I want something that doesn't require a software/script to be loaded
on the computer.

Something along the lines of WiebeTech's MouseJiggler <
http://www.wiebetech.com/products/MouseJiggler.php >, where it
justsends the mouse commands without loading any software.

Or maybe a programmable keyboard that can send keystroke as soon as
it
is connected, without requiring any software/script to be loaded.
Obviously this device would require a built-in processor and some
memory.

saqib
http://doctrina.wordpress.com/



Wesley McGrew, MS, GCIH
wesley@xxxxxxxxxxxxxxxxxx
http://www.mcgrewsecurity.com



Relevant Pages

  • Re: Programmable USB device that can send keystrokes?
    ... To the best of my understanding, he's looking for something that appears to the host as being a USB keyboard, only instrumented to send pre-recorded keystrokes. ... many Windows machines are configured to automatically execute a given program when a disc or USB stick is inserted even though it isn't the most secure behavior. ... I want something that doesn't require a software/script to be loaded ...
    (Security-Basics)
  • Re: Programmable USB device that can send keystrokes?
    ... I don't see why this wouldn't be possible (you could probably knock together a not-small prototype with a microcontroller and the guts of a USB keyboard), but I'm not aware of any products than can be purchased right now. ... many Windows machines are configured to automatically execute a given program when a disc or USB stick is inserted even though it isn't the most secure behavior. ... I want something that doesn't require a software/script to be loaded ...
    (Security-Basics)
  • Re: installing FreeBSD 6.2 w/ ICH8 chipset
    ... to execute dmesg is choosing an Emergency Holographic Shell from Fixit ... a shell, the USB stick mounted, and dmesg executed. ...
    (comp.unix.bsd.freebsd.misc)
  • Re: Controlling specific USB devices on Windows XP
    ... I saw it first hand with a USB device bought from Best Buy that had a hard coded partition which mimicked a CD-ROM. ... When inserted, that partition would be recognized as a CD-ROM device, and would autorun the content. ... While the device will not execute autorun.inf upon insertion, there is another means by which autorun can be used to accomplish this task fairly simply. ... I get the Autoplay window that asks me what I want to do: Copy pictures, View a slideshow, Open a folder, or take no action. ...
    (Focus-Microsoft)
  • Re: copy limitations in NTFS?
    ... > Where did this poster say anything about USB? ... >> Try running Disk CleanUp in all user profiles! ... >> recommend creating a restore point before using cCleaner. ... >> Enquire, plan and execute ...
    (microsoft.public.windowsxp.basics)