PentesterAcademy – USB Forensics and Pentesting [40 MP4, 11 ZIP]
English | Size: 816.22 MB (855,865,532 bytes )
Category: Tutorial
Dr. Philip Polstra (Dr. Phil) has been involved with technology since an early age. He and one of his brothers cleaned out their savings to purchase a TI-99/4a computer in the early 80’s, much to the chagrin of his parents. He has been tinkering with computers and electronics ever since. Phil is an internationally recognized hardware hacker and information security expert. He has made repeat appearances at several of the top conferences worldwide. Here are just a few of the conferences he has spoken at: DEFCON (six times in four years), Blackhat, 44CON, GrrCON, BruCon, ForenSecure, SecTOR, c0c0n, Shakacon, B-sides Detroit, and B-sides Iowa. His work on developing small affordable hacking devices is documented in the book “Hacking and Penetration Testing with Low Power Devices”. He is also known for his work on USB hacking and forensics. Phil has published several articles on USB-related topics.
Phil is an Associate Professor in the department of Math, Computer Science, and Statistics at Bloomsburg University of Pennsylvania where he teaches Digital Forensics. His current research focus is on developing ultra-low-power hacking hardware. Phil also performs security penetration tests and forensic investigations on a consulting basis. His book “Linux Forensics” is considered a must have by a number of people in the forensics and information security community.
In addition to in-person training, consulting, presenting at conferences, and running conference workshops, Phil has also produced hundreds of instructional videos. His video courses are available at PentesterAcademy.com, PluralSight, O’Reilly, udemy.com, and elsewhere.
When not teaching, Phil enjoys spending time with his family, tinkering with electronics, attending infosec conferences, experimenting with software defined radio (SDR) and various aviation activities. Phil is an accomplished aviator with a dozen ratings, all of which are current. Phil’s ratings include Commercial Pilot, Flight Instructor, Airframe and Powerplant Mechanic, Aircraft Inspector, and Avionics Technician. His flight hours are measured in the thousands and he has been known to build aircraft.
COURSE DETAILS
This course will cover USB in detail with an emphasis on understanding USB Mass Storage devices (also known as flash drives or thumb drives).By the end of this course students will know how to sniff USB traffic using open source tools, be able to write-block USB mass storage devices using software and microcontroller-based hardware, be able to impersonate other USB devices, and understand how to make forensic duplicates of USB mass storage devices. Along the way students will also learn how to use microcontrollers and Udev rules.
A non-exhaustive list of topics includes:
USB basics
– USB hardware
– USB versions
– Connection process
USB classes
– HID
– Mass storage
– Others
USB endpoints
– Interupt
– Bulk
– Isochronous
– Control
Descriptors
– Device
– Interface
– Configuration
– Endpoint
– String
Mass Storage Basics
– Presentation (SCSI hard drive)
– NAND flash limitations
– Communication
– Command Block Wrappers
– Data transport phase
– Command Status Wrappers
Making forensic images and duplicates
– FTDI Vincullum II microcontroller
– Simple compact duplicator
– Reading sectors
– Main processing loops
– Hardware implementation
– Programming the hardware
– Improving performance
– More user friendly duplicator
– Adding an LCD screen
USB Write blocking
– Motivation
– Software write blocker
– Hardware write blocker
– Mitigation of BadUSB and similar threats
USB Impersonation
– Motivation
– High level design
– Timers
– Descriptor request handler
– GPIO (buttons and displays)
– Software
– Hardware
– Buttons
– LEDs
– LCDs
Leveraging Open Source
– lsusb
– understanding Linux USB busses
– dmesg
– sniffing USB traffic
– usbmon
– WireShark
– Viewing descriptors in WireShark
Dealing with Windows-only devices
Using udev rules
DOWNLOAD:
http://rapidgator.net/file/84517497a65f2a5091d4ef5fa8af8543/Pentester_Academy_USB-Forensics-and-Pentesting.part1.rar.html
http://rapidgator.net/file/62fbda4fe2968aaa9dad8a3ad246494d/Pentester_Academy_USB-Forensics-and-Pentesting.part2.rar.html
http://rapidgator.net/file/f67609b9111996d1e1ccc6cad4a4b6fa/Pentester_Academy_USB-Forensics-and-Pentesting.part3.rar.html
http://rapidgator.net/file/cf32cc874c52a6dc2632ded09452f845/Pentester_Academy_USB-Forensics-and-Pentesting.part4.rar.html
http://rapidgator.net/file/56f44e69c77bec7a5fbf1bbfb00719cd/Pentester_Academy_USB-Forensics-and-Pentesting.part5.rar.html
http://rapidgator.net/file/a0d523035b7f51493ccdd6ddfdf264df/Pentester_Academy_USB-Forensics-and-Pentesting.part6.rar.html
http://rapidgator.net/file/c264496f2c065d0ab2277033f40e9d26/Pentester_Academy_USB-Forensics-and-Pentesting.part7.rar.html
http://www.nitroflare.com/view/CBD81A6D0F11670/Pentester_Academy_USB-Forensics-and-Pentesting.part1.rar
http://www.nitroflare.com/view/C92713E4EB987D4/Pentester_Academy_USB-Forensics-and-Pentesting.part2.rar
http://www.nitroflare.com/view/56243F63779760D/Pentester_Academy_USB-Forensics-and-Pentesting.part3.rar
http://www.nitroflare.com/view/4B509BC3E19C10E/Pentester_Academy_USB-Forensics-and-Pentesting.part4.rar
http://www.nitroflare.com/view/8A431E0C6CD2B6D/Pentester_Academy_USB-Forensics-and-Pentesting.part5.rar
http://www.nitroflare.com/view/A880C98B1EEDC0D/Pentester_Academy_USB-Forensics-and-Pentesting.part6.rar
http://www.nitroflare.com/view/7226DD7987934BA/Pentester_Academy_USB-Forensics-and-Pentesting.part7.rar
If any links die or problem unrar, send request to http://goo.gl/aUHSZc
Leave a Reply