Penetration Testing mailing list archives

Re: Security with USB Devices


From: Anders Thulin <Anders.Thulin () tietoenator com>
Date: Wed, 27 Jul 2005 08:15:06 +0200

NewYork User wrote:

Does any one know a good program to "autorun" from USB drive on a
windows 2000 or an XP machine?

  There is useful information about autorun in the MS Knowledgebase.
If I recall, the device needs to have some status bit set to be
eligible for this -- something about removable media (as distinct from
removable device) -- it's the 'media inserted' message that triggers autorun.
USB memorysticks are typically removable devices only, and so won't produce
'media inserted'. Some memorystick device/driver combinations are said
to allow this to be configured. A quick Google search for 'USB memorystick
autorun' comes up with several possible units.

  (This has been asked before in pen-test -- check the archives for
all details.)

--
Anders Thulin   anders.thulin () tietoenator com   040-661 50 63        
TietoEnator Telecom & Media AB, Box 85, SE-201 20 Malmö


Current thread: