Explore the vulnerabilities and exploitation techniques of USB/IP in Linux through this comprehensive Black Hat conference talk. Dive into the framework's architecture, components, and protocol for sharing USB devices over networks. Learn about client-side operations, source code analysis, and potential buffer overflow vulnerabilities. Witness a live demonstration of data injection and gain insights into kernel memory allocation. Discover practical tips for protecting network traffic and access additional resources to further your understanding of USB/IP security implications.
Overview
Syllabus
Introduction
About me
Agenda
Are you vulnerable
What is USBIP
Basic architecture
Linux components
Client side of operations
Source code
USBIP protocol
Receiving code
Buffer overflow
Prerequisites
Demo
Data Injection
Kernel Memory Allocator
Tips
Protect your traffic
Additional resources
Soundbites
Taught by
Black Hat
