Purple Team

CRT09 USBreached and USBroken

11/19/2024

4:15pm - 5:30pm

Level: Introductory

Andy Milford

CEO

RDPSoft

Delve into the world of physical computer security by revisiting the good old fashioned USB port, and all the threats to your computer and network that can originate from USB devices. From USBKillers, Juicejackers (malevolent charging ports), and Rubber Duckies, we'll cover the whole gamut of threats posed from by USB drives, cables, charging ports, and Human Input Devices, and how to protect yourself from them. We might even fry a laptop or two for fun during the session!

You will learn:

  • How attackers use Rubber Duckies and other HID devices to compromise systems and exfiltrate data
  • How Juice Jackers distribute malware to devices, and how USBKillers can destroy hardware.
  • How to mitigate common USB attack vectors, by using USB port locks, disabling USB ports in BIOS or in the OS, and other protective techniques.