The RFID Research Group as created a new security and penetrating testing tool, disguised as a USB cable. The aptly named USBNinja looks and functions just like a regular USB cable (both power and data) until a wireless remote control triggers it to deliver your choice of payload. “In essence, USBNinja is the next step in the evolution of BadUSB, embedding the attack in the USB cable itself”.
“When plugged into a host computer, USBNinja acts just like a regular USB cable. For example, it can be used both to charge your phone and to transfer images from your phone to your computer. However, perfectly concealed within USBNinja is a very small Bluetooth device, patiently waiting. When USBNinja receives the secret command, either from a smartphone running the USBNinja app or from our custom-built Bluetooth remote control, it goes from a passive cable to a stealthy attacker by emulating a USB mouse and/or keyboard to deliver its hidden payload to the host computer. he payload delivered by USBNinja is completely customizable. You can use the standard Arduino IDE to create your own payload and we’ll also provide plenty of examples of payloads that inject keystrokes and move and click the mouse.”
Features and specifications of the USBNinja USB cable :
Cable Physical Characteristics
Length: 1 m
Color: white
Connector options: Micro-USB, USB Type-C, Lightning
Voltage range: 4-25 V (supports fast charging)
Current consumption: 10 mA (typical)
Full-rate USB data transmission
Remote Control
High-powered Bluetooth wireless (customizable name and password)
Battery: 3.6 V, 40 mAh, rechargeable
Standby current: 80 μA
Transmission current: 30 mA
Range (under ideal conditions with antenna):
30 m with 2 dBi, 3 cm antenna
50 m with 3 dBi, 11 cm antenna
100 m with 18 dBi directional panel antenna
Mobile App
Alternative to remote control for triggering payload
Open source and freely available
Programming
Payload programmable with standard Arduino IDE (Windows/Mac/Linux/Android)
Access bootloader with non-contact magnetic ring
Source code provided for example payload
The USBNinja is now available from $99 from the Crowd Supply website.
Source : Crowd Supply
Latest Geeky Gadgets Deals
Disclosure: Some of our articles include affiliate links. If you buy something through one of these links, Geeky Gadgets may earn an affiliate commission. Learn about our Disclosure Policy.
