Explaining BadUSB Hardware

In the second installment of our exploration, we will take a closer look at the hardware dimension of BadUSB devices, examining the diverse array of models present in the market today. It’s important to note that this compilation is not exhaustive; it does not endorse or favor any specific brand or model, nor does it serve as a critique of individual brands. The aim is to furnish you with a comprehensive survey of the various types of BadUSBs available.

As we navigate through this segment, bear in mind that the specifics may become antiquated swiftly due to the rapid pace of technological innovation and the constant flux of devices entering and exiting the market. Nevertheless, the foundational knowledge imparted here is designed to withstand the test of time, offering insights that will retain their pertinence well into the future. This guide is crafted to equip you with the essential understanding necessary to navigate the evolving landscape of BadUSB technology.

To protect against BadUSB it is important that you understand what you are up against, what is available on the market, and the capabilities of each.

There are basically 5 types of BadUSB:

1. BadUSB Drives – these comes in the form of USB flash drives.
2. Wireless BadUSB – these are in the form of USB flash drives but with wireless technology for remote control.
3. BadUSB Cables – they are now able to hide inside the form of regular-looking USB Cables. This is actually the preferred method used by U.S. Intelligence Agencies.
4. Advanced BadUSB – these can act like keyboard but can also act as mass storage and ethernet adapters, providing an even greater attack.
5. DIY BadUSB – these are typically made from regular development boards by experienced hackers.

Hak5 is one of the most famous BadUSB manufacturers on the market today, made famous by the TV show Mr. Robot:

• Wifi Pineapple – https://hak5.org/collections/best-selling/products/wifi-pineapple
  • Automate WiFi auditing with all new campaigns and get actionable results from vulnerability assessment reports. Command the airspace with a new interactive recon dashboard, and stay on-target and in-scope with the leading rogue access point suite for advanced man-in-the-middle attacks
• O.MG Cable – https://hak5.org/collections/best-selling/products/omg-cable
  • The O.MG Cable is a hand made USB cable with an advanced implant hidden inside. It is designed to allow your Red Team to emulate attack scenarios of sophisticated adversaries.
• Rubber Ducky – https://hak5.org/collections/best-selling/products/usb-rubber-ducky
  • Computers trust humans. Humans use keyboards. Hence the universal spec — HID, or Human Interface Device. A keyboard presents itself as a HID, and in turn it’s inherently trusted as human by the computer. This is “THE” keystroke injection tool! It’s been around since 2010 with a huge community following. It was developed by a group called Hak5 which is located in the U.S. It uses Ducky Script 3.0. MalDuino is an alternative to the Rubber Ducky and is Arduino-based.
• Bash Bunny – https://hak5.org/collections/best-selling/products/bash-bunny
  • Simultaneously mimic multiple trusted devices to trick targets into divulging sensitive information without triggering defenses. The Bash Bunny is truly the world’s most advanced USB attack platform.
• Malicious Cable Detector – https://hak5.org/collections/best-selling/products/malicious-cable-detector-by-o-mg
  • The Malicious Cable Detector detects all known malicious USB cables.
• Shark Jack – https://hak5.org/collections/hotplug-attack-tools/products/shark-jack
  • As tiny Linux computers, they run DuckyScript™ payloads powered by Bash. Armed out-of-the-box with an ultra fast network scanner, you’ll get recon with the flick of a switch.
• Plunder Bug – https://hak5.org/collections/hotplug-attack-tools/products/bug
  • Coupled with cross-platform scripts for Windows, Mac and Linux – or an Android root app – this smart network sniffer enables passive recording or active scanning

Maltronics is another popular BadUSB supplier, they are the #1 supplier of the famous Wireless BadUSB that allows for remote control. (https://maltronics.com/collections/malduinos). It has an easy-to-use Web UI, can store thousands of scripts, can switch between keyboard languages. I personally have this and love the ease of use and flexibility.

They also sell a product called WiFi Deauther, which demonstrates a vulnerability in the 2.4GHz WiFi protocol. It can kick devices off a network irrespective of whether you are connected to it or not. Using your Deauther, simply scan for nearby networks, select the network or individual clients you wish to kick off, then hit the Deauth button! (https://maltronics.com/products/wifi-deauther)