Cyber Risks · Cisco Talos

Talos DEFCON badge build instructions and use

Summary: Cisco Talos distributed DEFCON Blue Team Village badges built as Digispark clones around an ATtiny85, and published a guide to fix two board bugs: diode D1's cathode marking is reversed due to a faulty schematic, and the USB port schematic was rotated, requiring a trace cut and removal of one connector pin. Once fixed, the badge can impersonate a USB keyboard using the example sketch, and it can be powered from USB or via J2 with 5V to 20V on the left pin.

Bottom line: The badge identifies itself as an Arduino, disconnects, then reconnects as a keyboard and types its commands within about five seconds - a working demonstration that a device small enough to hand out at a conference can act as an unattended keystroke injector on any machine it is plugged into.

Read the original at Cisco Talos ↗

Topics
Malware
Related