Infectious Media - Bypassing AutoRun Once and for All

Learn how to bypass AutoRun security measures using Human Interface Device (HID) attack vectors in this 44-minute conference talk. Explore the Teensy DIY HID device, various attack methods, and USB filtering vulnerabilities. Dive into executable basics, payload creation, and techniques for handling large files. Discover how to convert EXE to HEX code and address issues with SD cards. Gain insights into Teensy Serial Libraries and ongoing developments in this field. Presented by Josh Kelley (winfang98) from Infectious Media at DerbyCon, this talk provides valuable information for cybersecurity professionals and enthusiasts interested in understanding and mitigating HID-based attacks.

Intro
Who am I?
HID as an attack vector
The Teensy - the DIY HID Device
Different attack vectors
Other fun
Less common attack vector
USB Filtering, the joke
Executables - The basics
The key large files
What about an shell?
The Swiss Army knife of payloads
But there is a problem?
EXE to HEX code
Converting from HEX to Binary
What about LARGE files?
Issues with the SD card
Large files and SD
Teensy Serial Libraries
Work in progress
Questions?
Relik as the bride