bad USBs are SCARY!! (build one with a Raspberry Pi Pico for $8)

2,752,384
0
Published 2021-08-20
Protect your passwords (what I use): ntck.co/dashlane


šŸ§ŖšŸ§ŖLinks and Guide: ntck.co/3j02oXk


What you might think is just a regular usb flash drive is actually a BAD USB (badusb), a device designed by hackers to hack your computer. In this video, Iā€™m going to show you how to use one and build one with a Raspberry Pi Pico.

---------------------------------------------------

šŸ„‡šŸ„‡ENTER TO WIN a USB Rubber Ducky from HAK5: ntck.co/3mjar3v
(must be a member of NetworkChuck. Join here: ntck.co/free )

---------------------------------------------------

Get a Raspberry Pi Pico: geni.us/hSRkzrO ($8) (affiliate)
Get a USB Rubber Ducky: ntck.co/hak5 (affiliate)




šŸ”„šŸ”„Join the NetworkChuck membership: ntck.co/Premium


**Sponsored by Dashlane




SUPPORT NETWORKCHUCK
---------------------------------------------------
āž”ļøNetworkChuck membership: ntck.co/Premium
ā˜•ā˜• COFFEE and MERCH: ntck.co/coffee

Check out my new channel: ntck.co/ncclips

šŸ†˜šŸ†˜NEED HELP?? Join the Discord Server: discord.gg/networkchuck

STUDY WITH ME on Twitch: bit.ly/nc_twitch

READY TO LEARN??
---------------------------------------------------
-Learn Python: bit.ly/3rzZjzz
-Get your CCNA: bit.ly/nc-ccna

FOLLOW ME EVERYWHERE
---------------------------------------------------
Instagram: www.instagram.com/networkchuck/
Twitter: twitter.com/networkchuck
Facebook: www.facebook.com/NetworkChuck/
Join the Discord server: bit.ly/nc-discord

0:00 ā© Intro
0:28 ā© BadUSB attacks
2:35 ā© how BADusbā€™s work
4:48 ā© Build your own Bad USB (Raspberry Pi Pico)
10:08 ā© Create your Bad USB attack!! (Ducky Script)
15:34 ā© How to defend against BadUSB attacks!!





AFFILIATES & REFERRALS
---------------------------------------------------
(GEAR I USE...STUFF I RECOMMEND)
My network gear: geni.us/L6wyIUj
Amazon Affiliate Store: www.amazon.com/shop/networkchuck
Buy a Raspberry Pi: geni.us/aBeqAL

#badusb #usbrubberducky #raspberrypi

All Comments (21)
  • @NetworkChuck
    Protect your passwords (what I use): ntck.co/dashlane šŸ§ŖšŸ§ŖLinks and Guide: ntck.co/3j02oXk What you might think is just a regular usb flash drive is actually a BAD USB (badusb), a device designed by hackers to hack your computer. In this video, Iā€™m going to show you how to use one and build one with a Raspberry Pi Pico. --------------------------------------------------- šŸ„‡šŸ„‡ENTER TO WIN a USB Rubber Ducky from HAK5: ntck.co/3mjar3v (must be a member of NetworkChuck. Join here: ntck.co/free ) --------------------------------------------------- Get a Raspberry Pi Pico: geni.us/hSRkzrO ($8) (affiliate) Get a USB Rubber Ducky: ntck.co/hak5 (affiliate) šŸ”„šŸ”„Join the NetworkChuck membership: ntck.co/Premium
  • @danhoward2804
    I quit my job as a store manager for a fortune 500 company, went back to school for cyber security and now work in I.T. because of you. Great stuff, Chuck! Thanks!
  • @echologname
    My grandma often forgets how to do some things on her computer. I tell her and she writes down the steps but that's not always reliable because she can lose the paper she wrote on. I'd do something like this but write a script that would perform whatever task she doesn't know how to do for herself and it's as simple as inserting the device. Thanks for the video Chuck! ā¤
  • @pumello
    When i was studying ICT, one of our first lessons was computer lab etiquette. Always, before you leave your computer, hit Win+L on the keyboard to logout. Always. As a result, now whenever i get up and leave my own PC even at home, 5 years later, i still instinctively spread my pinkie and thumb out and slam those keys, even if i leave my PC for only a few seconds. Thanks teach. Good lesson ya taught me.
  • @TheModSmith
    Hi Chuck! Cool video. You actually can disable the Pico coming up as a storage device by bridging pins 18 and 20 on the board. Keep in mind that you will have to get rid of this bridge in order to change the payload again.
  • @schangoDoobie
    Iā€™m a teacher, Iā€™m going to label it the bad drive ā€œgrade bookā€ and drop in the the classroom.
  • @GodModeMaker
    To stop Raspberry Pi from running script, you can add a physical switch on the board and edit the code to check if the switch is on or off. And based on that, run the script or not. I used this method on an Arduino Nano. I hope it helps šŸ˜
  • @JM7900
    Im glad I found this channel. You're easily becoming one of my favorite content creators. Gz man
  • Cool video NetworkChuck! Would it be possible to use a Raspberry Pi as a "Quarantine Station" - ie a standalone device that can check any USB for malware or viruses before they are plugged into a PC/Laptop?
  • @Darkk6969
    For the Raspberry Pi PICO you could use one of the inputs to create a "safe" mode before plugging into your computer. This way you wouldn't have to keep using the reset and re-do everything.
  • @babyyodar3426
    gosh you're probably the funniest and most lively programming, hacking channels ever! I loved the rick roll dude, keep it up! :)
  • @RonSheely
    Thanks Charles. You're an inspiration. I've been wanting to better understand bootstrapping. I'm gonna to buy a few Rpi Pico boards. I already own a half doz Pi boards. I'll build a bad laptop too. I love retirement!
  • @justinhair7268
    Dude, I bought a Pico a couple months ago and then never did anything with it... Now I know what to do with! Your awesome!
  • @davidmalka1693
    Alright chuck you convinced me, I'm doing this to my friend! Just one thing, how do you stop the rick roll once it started
  • @StanTheBrand
    That brought back memories! Back in the day we would modify network login scripts to play ā€œA CERTAIN VIDEOā€ and the more you press keys the faster the video would play! IT fun.
  • I picked up a flash drive as a kid and plugged it into a laptop we had, luckily it was just a normal flash drive, but I'm glad I watched this video. I actually still have the flash drive too.
  • Hi, let me start with saying, yet another great video! Keep up this great work you do, making people understand security aspect better. Now, I usually donā€™t have any remarks on your videos but I do want to mention one thing here. Advising changing the conformation prompt to a password prompt isnā€™t the recommended practice. Actually our internal studies (ex msft security person here) have shown that thereā€™s actually a risk increase of leaking your actual credentials when using the password option. Windows secure desktop should prevent send keys functionality, hence turning that off is bad as well. Needless to say there are other known bypasses for uac, But thatā€™s another story. Hope it helps a bit. Until next timeā€¦.. coffee break!
  • @poison99x
    Do more Raspberry PI videos! This was so entertaining.
  • @muso3255
    Thank you for sharing and warn us of them. sometimes it makes me scared cause I'm really not good in computer. I even don't understand all you were showing us especially on some letters lots of enters and py or pie.. But at least I can get from your video is "do not use unauthorized USB storage". I keep it in mind thank you again.
  • @grayghost832
    Well I think I just found my first rpi pico project! Still very new to a lot of this stuff but sometimes I get inspiration to learn some more. It's kind of a learning curve but feels rewarding to learn. So a few weeks ago, I got an rgb led to cycle through all the colors on Arduino. It felt awesome to have it work after typing it all out. It's nothing crazy but still felt good. That's the level I'm on. I still kind of don't know how to write my own programs but can follow directions to make them.