Saturday, January 26, 2008

usb key evil tools

In the movies "hackers" plug in devices to computers and progress bars appear showing "downloading". This is not reality. Below are two tools that are reality. Usb keys can be used to silently install and retrieve and email keyloggers.
USB Switchblade
"The goal of the USB Switchblade is to silently recover information from a target Windows 2000 or higher computer, including password hashes, LSA secrets, IP information, etc... "

USB hacksaw
"The USB Hacksaw is an evolution of the popular USB Switchblade that uses a modified version of USBDumper, Blat, Stunnel, and Gmail to automatically infect Windows PCs with a payload that will retrieve documents from USB drives plugged into the target machine and securely transmit them to an email account.