bad USBs are SCARY!! (build one with a Raspberry Pi Pico for $8)
2,752,384
Published 2021-08-20
š§Ŗš§ŖLinks and Guide: ntck.co/3j02oXk
What you might think is just a regular usb flash drive is actually a BAD USB (badusb), a device designed by hackers to hack your computer. In this video, Iām going to show you how to use one and build one with a Raspberry Pi Pico.
---------------------------------------------------
š„š„ENTER TO WIN a USB Rubber Ducky from HAK5: ntck.co/3mjar3v
(must be a member of NetworkChuck. Join here: ntck.co/free )
---------------------------------------------------
Get a Raspberry Pi Pico: geni.us/hSRkzrO ($8) (affiliate)
Get a USB Rubber Ducky: ntck.co/hak5 (affiliate)
š„š„Join the NetworkChuck membership: ntck.co/Premium
**Sponsored by Dashlane
SUPPORT NETWORKCHUCK
---------------------------------------------------
ā”ļøNetworkChuck membership: ntck.co/Premium
āā COFFEE and MERCH: ntck.co/coffee
Check out my new channel: ntck.co/ncclips
ššNEED HELP?? Join the Discord Server: discord.gg/networkchuck
STUDY WITH ME on Twitch: bit.ly/nc_twitch
READY TO LEARN??
---------------------------------------------------
-Learn Python: bit.ly/3rzZjzz
-Get your CCNA: bit.ly/nc-ccna
FOLLOW ME EVERYWHERE
---------------------------------------------------
Instagram: www.instagram.com/networkchuck/
Twitter: twitter.com/networkchuck
Facebook: www.facebook.com/NetworkChuck/
Join the Discord server: bit.ly/nc-discord
0:00 ā© Intro
0:28 ā© BadUSB attacks
2:35 ā© how BADusbās work
4:48 ā© Build your own Bad USB (Raspberry Pi Pico)
10:08 ā© Create your Bad USB attack!! (Ducky Script)
15:34 ā© How to defend against BadUSB attacks!!
AFFILIATES & REFERRALS
---------------------------------------------------
(GEAR I USE...STUFF I RECOMMEND)
My network gear: geni.us/L6wyIUj
Amazon Affiliate Store: www.amazon.com/shop/networkchuck
Buy a Raspberry Pi: geni.us/aBeqAL
#badusb #usbrubberducky #raspberrypi
All Comments (21)
-
Protect your passwords (what I use): ntck.co/dashlane š§Ŗš§ŖLinks and Guide: ntck.co/3j02oXk What you might think is just a regular usb flash drive is actually a BAD USB (badusb), a device designed by hackers to hack your computer. In this video, Iām going to show you how to use one and build one with a Raspberry Pi Pico. --------------------------------------------------- š„š„ENTER TO WIN a USB Rubber Ducky from HAK5: ntck.co/3mjar3v (must be a member of NetworkChuck. Join here: ntck.co/free ) --------------------------------------------------- Get a Raspberry Pi Pico: geni.us/hSRkzrO ($8) (affiliate) Get a USB Rubber Ducky: ntck.co/hak5 (affiliate) š„š„Join the NetworkChuck membership: ntck.co/Premium
-
I quit my job as a store manager for a fortune 500 company, went back to school for cyber security and now work in I.T. because of you. Great stuff, Chuck! Thanks!
-
My grandma often forgets how to do some things on her computer. I tell her and she writes down the steps but that's not always reliable because she can lose the paper she wrote on. I'd do something like this but write a script that would perform whatever task she doesn't know how to do for herself and it's as simple as inserting the device. Thanks for the video Chuck! ā¤
-
When i was studying ICT, one of our first lessons was computer lab etiquette. Always, before you leave your computer, hit Win+L on the keyboard to logout. Always. As a result, now whenever i get up and leave my own PC even at home, 5 years later, i still instinctively spread my pinkie and thumb out and slam those keys, even if i leave my PC for only a few seconds. Thanks teach. Good lesson ya taught me.
-
Hi Chuck! Cool video. You actually can disable the Pico coming up as a storage device by bridging pins 18 and 20 on the board. Keep in mind that you will have to get rid of this bridge in order to change the payload again.
-
Iām a teacher, Iām going to label it the bad drive āgrade bookā and drop in the the classroom.
-
To stop Raspberry Pi from running script, you can add a physical switch on the board and edit the code to check if the switch is on or off. And based on that, run the script or not. I used this method on an Arduino Nano. I hope it helps š
-
Im glad I found this channel. You're easily becoming one of my favorite content creators. Gz man
-
Cool video NetworkChuck! Would it be possible to use a Raspberry Pi as a "Quarantine Station" - ie a standalone device that can check any USB for malware or viruses before they are plugged into a PC/Laptop?
-
For the Raspberry Pi PICO you could use one of the inputs to create a "safe" mode before plugging into your computer. This way you wouldn't have to keep using the reset and re-do everything.
-
gosh you're probably the funniest and most lively programming, hacking channels ever! I loved the rick roll dude, keep it up! :)
-
Thanks Charles. You're an inspiration. I've been wanting to better understand bootstrapping. I'm gonna to buy a few Rpi Pico boards. I already own a half doz Pi boards. I'll build a bad laptop too. I love retirement!
-
Dude, I bought a Pico a couple months ago and then never did anything with it... Now I know what to do with! Your awesome!
-
Alright chuck you convinced me, I'm doing this to my friend! Just one thing, how do you stop the rick roll once it started
-
That brought back memories! Back in the day we would modify network login scripts to play āA CERTAIN VIDEOā and the more you press keys the faster the video would play! IT fun.
-
I picked up a flash drive as a kid and plugged it into a laptop we had, luckily it was just a normal flash drive, but I'm glad I watched this video. I actually still have the flash drive too.
-
Hi, let me start with saying, yet another great video! Keep up this great work you do, making people understand security aspect better. Now, I usually donāt have any remarks on your videos but I do want to mention one thing here. Advising changing the conformation prompt to a password prompt isnāt the recommended practice. Actually our internal studies (ex msft security person here) have shown that thereās actually a risk increase of leaking your actual credentials when using the password option. Windows secure desktop should prevent send keys functionality, hence turning that off is bad as well. Needless to say there are other known bypasses for uac, But thatās another story. Hope it helps a bit. Until next timeā¦.. coffee break!
-
Do more Raspberry PI videos! This was so entertaining.
-
Thank you for sharing and warn us of them. sometimes it makes me scared cause I'm really not good in computer. I even don't understand all you were showing us especially on some letters lots of enters and py or pie.. But at least I can get from your video is "do not use unauthorized USB storage". I keep it in mind thank you again.
-
Well I think I just found my first rpi pico project! Still very new to a lot of this stuff but sometimes I get inspiration to learn some more. It's kind of a learning curve but feels rewarding to learn. So a few weeks ago, I got an rgb led to cycle through all the colors on Arduino. It felt awesome to have it work after typing it all out. It's nothing crazy but still felt good. That's the level I'm on. I still kind of don't know how to write my own programs but can follow directions to make them.