Penetration Testing: Re: Security with USB Devices

[Anders Thulin <Anders.Thulin () tietoenator com>]

NewYork User wrote:

> Does any one know a good program to "autorun" from USB drive on a
> windows 2000 or an XP machine?
  There is useful information about autorun in the MS Knowledgebase.
If I recall, the device needs to have some status bit set to be
eligible for this -- something about removable media (as distinct from
removable device) -- it's the 'media inserted' message that triggers autorun.
USB memorysticks are typically removable devices only, and so won't produce
'media inserted'. Some memorystick device/driver combinations are said
to allow this to be configured. A quick Google search for 'USB memorystick
autorun' comes up with several possible units.

  (This has been asked before in pen-test -- check the archives for
all details.)

--
Anders Thulin   anders.thulin () tietoenator com   040-661 50 63        
TietoEnator Telecom & Media AB, Box 85, SE-201 20 Malmö