Saturday, November 16, 2013

Multiplexed Wired Attack Surfaces

Kyle Osborn and I presented Multiplexed Wired Attack Surfaces at ToorCon 15. This was the second time we gave the talk. The first was at Black Hat USA 2013, but the ToorCon video was posted first.

The basic idea is that connectors on electronic devices are often used in unexpected ways and that some devices, especially phones and tablets, even multiplex several functions onto a single connector. We demonstrated how we are able to access an interactive shell on certain Android phones by connecting a special serial adapter to the phone's USB port; although we were physically connected to the phone via the USB port, we were not using USB.

Similar multiplexed interfaces are present on a wide variety of portable devices, often accessible via USB or headphone connectors. An excellent example using a headphone jack was published earlier this year. We hope that our talk will raise awareness about the attack surfaces presented by these types of interfaces.

The talk at ToorCon was a lot of fun. We got a shell and activated adb on a phone handed to us by a volunteer from the audience. I hope you enjoy the video, but you should also read the paper we wrote for Black Hat.

We've posted links to several resources related to the talk.


Doctor Who said...

Mr Ossman, I've gone over the work the two of you did last year with that diea to launch an ADB based shell on an Android based phone. I also studied the rig that you both wired. From the USB adapter it is easy to understand where everything goes. But not for the FT232R breakout board. What pins were selected for the colored wires in that photo?

Doctor Who said...

Pardon me, that should be "idea".

Xhakeira said...

this is what I need for my phone..
Informative URL for Atlanta Carpet Repair Company

Informative URL for Alaska Fishing Guide website said...

Thanks for sharing this resouces will check out this one

Informative URL for Santa Barbara Carpet Repair Outfit said...

This is way to complex for me, but it's a good post btw

Agen Bola Terpercaya said...

nice arrived hear Agen bola terpercaya

Agen Bola said...

nice day all guy.Agen Bola

Charlotte J. Gravely said...

Very nice post. I love it !
read more

Kyile rey said...

There is lot of articles on the web about this. But I like yours more, although i found one that’s more descriptive.

Access Control Services

Jary Jongeling said...

Which one is best curling iron


Your Blog is Very Impressive. I like it......
Website Designing Faridabad
Web Design Faridabad
Web Designing Faridabad
Website Design Faridabad
Web Design Services Faridabad
Website Design Company Faridabad
Website Development Faridabad
Web Development Faridabad
Web Development Services Faridabad
Search Engine Optimization Faridabad
Seo Service Faridabad
Seo Service in Faridabad

Hanasakam Abas said...

Here you can get review about Best curling Iron 2018

alat bantu sex pria vagina senter said...

obat kuat pil biru
obat kuat viagra usa 100mg
obat kuat viagra usa 100mg asli
obat pembesar penis
alat pembesar penis
celana vakoou
alat pembesar penis
selaput dara buatan
titan gel pembesar penis
vimax izon

Seak Soy said...

Top 5 best ballpoint pen brands in 2019 reviews
Top 5 best cookware sets in 2019 review
Top 5 best vlogging camera in 2019 review

Unknown said...

This is such an interesting article.
Well done.