USB Security Courses and Certifications

USB Arsenal for Masses - Open Source Tools for USB Traffic Analysis

Explore open-source tools for USB traffic monitoring, modification, and security testing. Learn about usbmon, OpenVizsla, USBProxy, GoodFET, and more for cost-effective USB analysis and research.

• YouTube
• 36 minutes
• On-Demand
• Free Video

IEEE

Plug & Pray Today - Understanding USB Insecurity in Versions 1 through C

Comprehensive overview of USB security vulnerabilities and defenses across multiple layers, analyzing attacks, countermeasures, and the USB Type-C Authentication protocol's limitations.

• YouTube
• 18 minutes
• On-Demand
• Free Video

USB Write Blocking with USBProxy - Techniques and Implementation

Explore USB write blocking techniques using USBProxy, including FaceDancer drawbacks, BeagleBone Black implementation, and mass storage blocking methods.

• YouTube
• 41 minutes
• On-Demand
• Free Video

DefCamp

BadUSB Attacks: Implementation and Defense Strategies

Explore BadUSB attacks: their mechanics, implementation, and potential impact on device security. Learn techniques to create and defend against these sophisticated USB-based threats.

• YouTube
• 30 minutes
• On-Demand
• Free Video

DEFCONConference

Breaking Boundaries: Popping Shells in Airgapped Systems with Arduino - BadUSB Exploitation

Discover how to bypass airgapped systems and execute wireless payloads using affordable Arduino hardware and basic coding techniques for penetration testing medical devices.

• YouTube
• 24 minutes
• On-Demand
• Free Video

DEFCONConference

Physical Attacks Against Smartphones: Android Security Vulnerabilities and Exploits

Discover physical attack vulnerabilities in Android smartphones, from Recovery mode exploits using SD cards to USB stack weaknesses in secondary bootloaders for achieving root access and code execution.

• YouTube
• 37 minutes
• On-Demand
• Free Video

DEFCONConference

Bug Hunting in VMware Device Virtualization - Security Vulnerabilities and Attack Surfaces

Delve into VMware device virtualization security, exploring USB system vulnerabilities, SCSI device emulation, and VMKernel design flaws through real-world bug hunting experiences and discoveries.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Hack In The Box Security Conference

BadUSB Attacks on MacOS - Beyond Using Terminal and Shell Commands

Discover advanced BadUSB attack techniques for MacOS, leveraging Apple-signed LOLBINs and native scripting languages to execute stealthy code without terminal commands.

• YouTube
• 21 minutes
• On-Demand
• Free Video

BSidesLV

Hackademia - The 2018 Literature Review

Explore cutting-edge cybersecurity research, from USB vulnerabilities to compiler techniques, with insights on emerging trends like citizen developers and domestic violence apps.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

Association for Computing Machinery (ACM)

ProvUSB - Block-level Provenance-Based Data Protection for USB Storage Devices

Block-level provenance-based data protection for USB storage devices, enhancing security in sensitive organizations through remote TPM, integrity models, and access control.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Black Hat

Breaking Samsung's Root of Trust - Exploiting Samsung S10 Secure Boot

Exploración de vulnerabilidades en el arranque seguro de Samsung S10, analizando el manejo de solicitudes USB en S-Boot y sus implicaciones para la seguridad del dispositivo.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

Black Hat

USB Attacks Need Physical Access Right? Not Any More

Explore remote USB attacks, their implications, and defense strategies in this eye-opening presentation on evolving cybersecurity threats.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Black Hat

How to Find Bugs in USB Device Drivers

Explore USB device driver vulnerabilities using vUSBf framework. Learn about fuzzing techniques, bug detection, and potential security risks in USB implementations across various operating systems.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

WEareTROOPERS

You Wouldn't Share a Syringe. Would You Share a USB Port?

Explore USB security vulnerabilities, device emulation, and exploitation techniques across operating systems. Learn to identify and mitigate risks associated with USB ports and devices.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

Black Hat

Injecting Malware into iOS Devices via Malicious Chargers

Demonstration of iOS device vulnerability through malicious chargers, bypassing security mechanisms to inject arbitrary software within one minute of connection, using a proof-of-concept called Mactans.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk