Hacking a network with an infectious mouse.

Hacking a network with an infectious mouse.(pentest.snosoft.com)

44 points by iamichi 15 years ago | 11 comments

JonnieCache 15 years ago |

You can have a some much less malicious fun applying the same idea to old games controllers. People typically put flash drives in them with an emulator + roms. It would be fun to put a whole linux distro on there that boots straight into the emulator, with a special menu, but I've never seen that.

http://edshowtos.blogspot.com/2008/06/how-to-make-your-own-n... (NES)

http://forums.benheck.com/viewtopic.php?t=35526 (SNES)

You can find a bunch of other hacks like this on HaD:

http://hackaday.com/page/1/?s=%22usb+hub%22

unreal37 15 years ago |

OMG, my mother's internet was dropping off and on yesterday, and as I was trying to diagnose the problem, she asked "maybe its the mouse." No mom, your mouse is not causing the Internet to drop....

Maybe it was the mouse. Damn.

MichaelApproved 15 years ago |

page not loading. Here's the Google cache http://webcache.googleusercontent.com/search?q=cache:9Z4lxiV...

iamichi 15 years ago | |

yeah, that went down very quickly. this url has proper formatting... http://webcache.googleusercontent.com/search?q=cache:9Z4lxiV...

woodall 15 years ago |

How was the payload executed? I've been thinking of trying to write malware test cases using HID specs, but the article doesn't go into much detail.

TeHCrAzY 15 years ago | |

0day vuln in convincing windows to auto-install the device drivers.

woodall 15 years ago | | |

Should have read better, and realized that IronGeek might have played a role.

http://www.irongeek.com/i.php?page=security/programmable-hid...

colonelxc 15 years ago | | |

I believe the 0-day was for subverting mcafee

andrewcooke 15 years ago |

cool, but if they were given a single IP to target why could they have the mouse on another machine? alternatively: if they could attack other machines, why not use another machine that was exposed via the network? something isn't consistent.

thaumaturgy 15 years ago | |

I'm assuming that they were asked to compromise a typical tightened corporate network, in which there's only a single external address -- the firewall's -- and therefore that's the only address they had to work with.

In that case, compromising one of the clients behind the firewall is the typical next step for an attack. (They did a heck of a nice job on that, though.)

VladRussian 15 years ago |

so, was the person who plugged in the mouse fired? I mean, while the firing would be understandably and justifiably "for cause", I personally feel disgust about provocations.