USB Killer 2.0

"Hardware designers of public machines should have a USB Kill to test their products: photo booths, copy machines, airline entertainment systems, ticket terminals, etc - anything with exposed USB ports should ensure that their systems resist electrical attacks."

Seems like a form of hardware pentesting to me, so for security experts and hardware designers, this looks like a pretty useful tool. :)

Re: USB Killer 2.0

#6

Post by [deleted] » Mon, Sep 12, 2016, 8:48 AM UTC

Camillo wrote: post #3

But why?

[deleted]

Re: USB Killer 2.0

#7

Post by _nalply » Mon, Sep 12, 2016, 8:51 AM UTC

cyphax wrote: post #5

Camillo wrote: post #3

But why?

To test your USB-ports. For consumers, this isn't overly useful. This is what they write: "Hardware designers of public machines should have a USB Kill to test their products: photo booths, copy machines, airline entertainment systems, ticket terminals, etc - anything with exposed USB ports should ensure that their systems resist electrical attacks." Seems like a form of hardware pentesting to me, so for security exp…

Sadly as with all forms of pentesting there is the flip side: Unprotected systems are vulnerable to attacks. Imagine one attacker distracting the victim in a café and the other attacker quickly inserting the Kill stick. Sort of a hardware Denial of Service.

I am going to research for lockable USB dongles you can insert and remove only with a key.

Re: USB Killer 2.0

#8

Post by _nalply » Mon, Sep 12, 2016, 9:18 AM UTC

_nalply wrote: post #7

cyphax wrote: post #5

Earlier quoted context omitted.

To test your USB-ports. For consumers, this isn't overly useful. This is what they write: "Hardware designers of public machines should have a USB Kill to test their products: photo booths, copy machines, airline entertainment systems, ticket terminals, etc - anything with exposed USB ports should ensure that their systems resist electrical attacks." Seems like a form of hardware pentesting to me, so for security exp…

Sadly as with all forms of pentesting there is the flip side: Unprotected systems are vulnerable to attacks. Imagine one attacker distracting the victim in a café and the other attacker quickly inserting the Kill stick. Sort of a hardware Denial of Service. I am going to research for lockable USB dongles you can insert and remove only with a key.

One example: http://www.connectworld.net/syscon/usb_security.html

Re: USB Killer 2.0

#9

Post by wruza » Mon, Sep 12, 2016, 9:26 AM UTC

Why not just crack usb socket with a knife? Or put super glue in there?

Re: USB Killer 2.0

#10

Post by elmigranto » Mon, Sep 12, 2016, 9:35 AM UTC

I don't quite get it. Site mentions that device "prevents data theft via 'juice-jacking'"; what do they mean? If I borrow someone's charger, and it has a chip that steals transmitted data somehow? Wouldn't better solution for this be charge from outlet, rather than nuking USB controller in your laptop?

  Hardware designers of public machines…
  …with exposed USB ports should ensure that their systems resist electrical attacks.

What's the attack, is it DOS via destroying a machine. If so, you better buy Hammer Kill 1.0 and test agains that.