USB Arsenal for Masses

on YouTube ↗36m

" summary

Shows concrete tooling and limits: usbmon logs kernel-level USB transfers (no link‑layer tokens) and works on any host; OpenVizsla is a ~$100 non‑intrusive hardware analyzer that captures link‑layer packets and now feeds Wireshark via Xcap; proxy approaches (USBProxy, dual MAX chips, GreatFET ~ $90) perform man‑in‑the‑middle, packet modification and device emulation for fuzzing; umap2 enumerates drivers and drives fuzz campaigns. None of the cheap hardware captures USB3.0 signaling.

AI-written summary · about

" chapters (18)

1. 0:00Introduction
2. 4:33USB Device
3. 6:10USB Bus
4. 6:35Link Layer
5. 8:41USB Transfer
6. 9:48USB Request Block
7. 10:35USB Monitor
8. 11:57Out Transfer
9. 12:38Wireshark Demo
10. 17:39USB Proxy
11. 19:33Logic Analyzer
12. 20:22OpenVSL
13. 24:33USB Security Testing
14. 27:28GreatFeed
15. 28:18Umap
16. 29:31Virtual Machines
17. 30:27SisColor
18. 31:52Conclusion

" related talks

• 27mCracking With Automated USB FuzzSubba Bachina, Conna · Nullcon Goa 2023
• 52mDebugging Usually Slightly Broken (USB) Devices and DriversKrzysztof Opasiak · Embedded Linux Conference + OpenIoT Summit North America 2017
• 25mDon't Trust Your USB! How to Find Bugs in USB Device DriversRalf Spenneberg, Hendrik Schwartke, Sergej Schumilo · Black Hat Europe 2014
• 26mUSB Snooping Made Easy: Crosstalk Leakage Attacks on USB HubsDaniel Genkin, Yuval Yarom, Yang Su, Damith Ranasinghe · 26th USENIX Security Symposium (USENIX Security '17)
• 33mMaking USB Great Again with USBFILTERDave (Jing) Tian, Nolen Scaife, Patrick Traynor, Adam Bates, Kevin R. B. Butler · USENIX Security '16
• 51mA Measured Response to a Grain of RiceJoe FitzPatrick · Black Hat Europe 2018
• 45mBadUSB - On Accessories that Turn EvilKarsten Nohl, Jakob Lell · Black Hat USA 2014
• 08mHubBub: Contention-Based Side-Channel Attacks on USB HubsYanxiang Bi, Dave (Jing) Tian, Junpeng Wan, Han Gao · USENIX Security '25