Flutterby™! : USB NTFS exploit

Next unread comment / Catchup all unread comments User Account Info | Logout | XML/Pilot/etc versions | Long version (with comments) | Weblog archives | Site Map | | Browse Topics

USB NTFS exploit

2012-10-23 14:14:37.726661+00 by Dan Lyke 2 comments

Exploiting a hole in NTFS to build a Windows "USB stick of death".

[ related topics: Microsoft ]

comments in descending chronological order (reverse):

#Comment Re: made: 2012-10-23 22:50:44.888565+00 by: Dan Lyke

This is similar in that it doesn't use autorun, but it also allows you to put escalated code on the target machine.

#Comment Re: made: 2012-10-23 22:26:50.022818+00 by: meuon

Irongeek USB HID hack See section 2.5:

The advantage of a USB HID for these sorts of functions over a U3 flash drive is that with a USB HID it does not matter if autorun is disabled or not. By default, most operating systems seem to automatically install and configure USB HIDs as soon as they are inserted, regardless of the privilege level of the current user.