Extracting Data With USB HID

January 26, 2013 by Brian Benchoff 59 Comments

sd_adaptor

High security workstations have some pretty peculiar ways of securing data. One of these is disabling any USB flash drives that may find their way into a system’s USB port. Security is a cat and mouse game, so of course there’s a way around these measures. [d3ad0ne] came up with a way of dumping files onto an SD card by using the USB HID protocol.

We’ve seen this sort of thing before where a microcontroller carries an executable to extract data. Previously, the best method was to blink the Caps Lock LED on a keyboard, sending one bit at a time to a micocontroller. [d3ad0ne]’s build exploits the USB HID protocol, but instead of 1 bit per second, he’s getting about 10kBps.

To extract data from a system, [ d3ad0ne] connects a Teensy microcontroller to the USB port. After opening up Notepad, [ d3ad0ne] mashes the Caps Lock key to force the Teensy to type out a script that can be made into an executable. This executable is a bare-bones application that can send any file back over the USB cable to the Teensy where it’s stored on an SD card. Short of filling the USB ports in a workstation with epoxy, there’s really no way to prevent secure files from leaking out of a computer.

Buzzed Buzzer Gives You A Breathalyzer Test While Ringing In The New Year

December 26, 2012 by Mike Szczys 2 Comments

We’re not sure if there’s enough time to get a parts order delivered, but no geeky New Year’s party will be complete without a party buzzer that doubles as a Breathalyzer. The Buzzed Buzzer hides all of the necessary bits inside of a paper and plastic party favor. We guess it only buzzes if you’re over the limit? Actually that’s not the case at all. The accuracy of the sensor used in the project really just measures the presence of alcohol and can’t quantify BAC.

A Teensy 2.0 microcontroller board drives the project. Powered by a Lithium cell, it monitors an MQ-3 Alcohol gas sensor and drives a buzzer. The components are just small enough to be hidden by the cone of the party buzzer. You can see a demonstration of this in the short clip after the jump.

This is a fun project, but we’re still big fans of getting the crowd involved with this large LED meter which is hooked up to the same style of alcohol sensor.

Continue reading “Buzzed Buzzer Gives You A Breathalyzer Test While Ringing In The New Year” →

The Beginnings Of A Geeky Wristwatch

December 5, 2012 by Mike Szczys 18 Comments

Wow, we’re seeing all kinds of good stuff from NYC Resistor today. [Caleb] found this link to [Hudson’s] early work on a geeky wristwatch. It is based around an HDSP-2112 eight-digit alpha-numeric display. Each digit is a 5×7 array of LEDs, but the look of it really reminds us of [Woz’s] Nixie Wristwatch. The nice thing about using a display like this one is it’s much easier to drive and the power requirements don’t really call for special consideration either.

The display happens to be nearly the same footprint as the Teensy 2.0. In fact, the display is a bit longer. That makes it a perfect backpack, bringing everything necessary to drive the display. Check out the video after the break to see it scrolling the time as words, and displaying numbers.

This needs to have an RTC and portable power source before you can wear it around. But the proof is there. Perhaps [Hudson] will spin his own board with a uC that includes RTC capability and a charging circuit for a tiny Lithium cell.

Continue reading “The Beginnings Of A Geeky Wristwatch” →

Brute Force Used To Crack A Key Logger’s Security Code

October 23, 2012 by Mike Szczys 29 Comments

The USB device seen plugged in on the right of this image was found in between the keyboard and USB port of the company computer belonging to a Senior Executive. [Brad Antoniewicz] was hired by the company to figure out what it is and what kind of damage it may have done. He ended up brute forcing an unlock code to access the device, but not before taking some careful steps along the way.

From the design and placement the hardware was most likely a key logger and after some searching around the Internet [Brad] and his colleagues ordered what they thought was the same model of device. They wanted one to test with before taking on the actual target. The logger doesn’t enumerate when plugged in. Instead it acts as a pass-through, keeping track of the keystrokes but also listening for a three-key unlock code. [Brad] wrote a program for the Teensy microcontroller which would brute force all of the combinations. It’s a good thing he did, because one of the combinations is a device erase code hardwired by the manufacturer. After altering the program to avoid that wipe code he successfully unlocked the malicious device. An explanation of the process is found in the video after the break.

Continue reading “Brute Force Used To Crack A Key Logger’s Security Code” →

Stare Deep Into This Well-lit Interactive Infinity Mirror

October 11, 2012 by Mike Nathan 26 Comments

infinity-mirror

[acorv] recently sent us a link to a cool, interactive infinity mirror (Translation) he built. He was originally a bit gun-shy about sending the project our way, but our recent Reddit AMA inspired [acorv] to submit it via our tip line, and we’re glad he did.

Having been lucky enough to score $100 of gear from Sparkfun’s 2012 Free Day, he picked up a pair of addressable LED strips and a Teensy++. He built an LED ring from reflective foil, sandwiching the strips between a mirror and a piece of mirror glass. The resulting infinity mirror looked nice enough, but [acorv] wanted to make the static display a bit more interesting.

He added an IR receiver and ultrasonic rangefinder to the mirror’s frame, allowing him to both control the display remotely and detect when people were standing nearby. As you can see in the video below, [acorv] can change the patterns on a whim, and the mirror speeds up the display when someone stops to take a closer look.

Continue reading “Stare Deep Into This Well-lit Interactive Infinity Mirror” →

Meet The Teensy 3.0

September 5, 2012 by Brian Benchoff 31 Comments

[Paul Stoffregen], the brains behind the popular and very capable Arduino-compatible Teensy development board, has offered his contribution to the explosion of ARM-powered boards with the Teensy 3.0.

The original Teensy is an AVR-based development board that goes far beyond the official Arduino offerings. The new and improved Teensy 3.0 improves upon an already wonderful platform with a 32 bit ARM Cortex-M4 microcontroller running at 48 MHz. There’s also a lot of pins available for whatever project you have in mind: the Teensy 3.0 supports 14 analog inputs, 10 PWM outputs, a USB host mode, and an I2S audio interface that will be very useful when accessing the microcontroller’s DSP functions.

There are a couple neat features on the Teensy 3.0 [Paul] somehow managed to work in. In addition to supporting a real-time clock, there are also a few extra IO pins in the middle of the board. [Paul] says the extra pins are due to Kinetis not releasing a 48 pin version of the microcontroller in time for production. It may not be what [Paul] originally had in mind, but we’ll take the upgraded board just the same.

Of course the Teensy 3.0 will be compatible with the Teensyduino Arduino IDE add-on, so if you’d like to run your Arduino sketches on a very powerful piece of hardware, this will be the board to use.

Teensy Board Used As An AM Radio Transmitter

September 4, 2012 by Mike Szczys 7 Comments

[Angus McInnes] has been working on AM radio transmission techniques. He tried out a method of using a VGA port for the task but found the vertical blanking was audible. His latest experiments use a Teensy microcontroller board as an AM transmitter.

This is not a standalone solution, but rather a hardware extension for his laptop. This is because the microprocessor doesn’t have enough cycles to do much more than read bytes over USB and push their bits out one of the I/O pins.

To get a steady stream of data he’s using isochronous mode to push a steady data stream via the USB connection. Bulk transfer is another option but [Angus] found that it caused some jitter in the audio. Each byte is fed to the AVR SPI hardware once every eight clock cycles. His transmission can be picked up from across the room, but that’s the limit since the AVR doesn’t put out that strong of a signal. But it should be a rather trivial exercise to build a simple amplifier.