Pi Zero as a universal USB stick

Attack Tool

The emulation of a keyboard (HID, or human interface device) is prepared but not activated by default, because keyboards disguised as USB sticks are a popular tool for hackers. Lying around, apparently lost in the company car park, curious finders guilelessly plug the stick into a PC and don't notice that it is sending commands over the keyboard interface.

Keyboard mode, as well as the emulated network, makes the mobile Pi Zero the ideal tool for pen testers, because this kind of access to PCs bypasses all the firewalls and security mechanisms. Admins in companies therefore disable the USB ports on the employees' PCs (either in the BIOS or in software) as a precaution. A complete implementation of a toolbox is provided by the GitHub project [10]. If you use it, you need to know what you are doing and be sure you have permission, wherever you may be.

Conclusions

The Pi Zero again demonstrates its universal utility value in various fields of application. With a mobile PC you can carry with you the server environment of your choice, use the Pi for demonstration purposes, or simply avoid overloading a host with unnecessary software.

Programmers, on the other hand, appreciate the genuine environment with all the physical interfaces that the Raspberry Pi offers, in contrast to an emulation (e.g., with Qemu). The overhead for modding the mini-computer, including the software installation, is definitely manageable.

The Author

Bernhard Bablok works at Allianz Technology SE as an SAP HR developer. When he's not listening to music, cycling, or walking, he deals with topics related to Linux, programming, and small computers. He can be reached at mailto:mail@bablokb.de.

Buy this article as PDF

Express-Checkout as PDF
Price $2.95
(incl. VAT)

Buy Linux Magazine

SINGLE ISSUES
 
SUBSCRIPTIONS
 
TABLET & SMARTPHONE APPS
Get it on Google Play

US / Canada

Get it on Google Play

UK / Australia

Related content

  • Raspberry Pie Zero: Just chill a bit.
  • Intel Unveils Compute Stick

    Four-inch-long computer on a stick lets you boot a full Linux system from any HDMI display device.

  • Adafruit PyPortal

    Unlike other displays for the Raspberry Pi, Adafruit's PyPortal touchscreen provides an autonomous environment, including a microprocessor, sound output, and a WiFi connection.

  • CircuitPython

    The CircuitPython run-time environment runs on almost all microcomputers and microcontrollers, making it perfect for cross-platform programming.

  • Perl: Jawbone UP Data

    The Jawbone UP electronic bracelet measures the wearer's daily activity and nocturnal sleep patterns. If you are bored by the official smartphone app, you can create your own Perl scripts and access your data via the unofficial web API.

comments powered by Disqus

Direct Download

Read full article as PDF:

Price $2.95

News