Universal Serial aBUSe - Remote Physical Access Attacks

This course aims to teach learners about novel USB-level attacks that enable remote command and control of air-gapped machines with minimal forensic footprint. The course covers the release of an open-source toolset using freely available hardware. Learners will acquire skills in creating malicious USB devices, establishing a stealthy bi-directional channel between the host and device, and communicating remotely via Wi-Fi/3G/Bluetooth. The teaching method involves discussing the process of creating these devices and releasing the toolkit during the talk. This course is intended for individuals interested in information security, particularly those looking to understand and defend against physical access attacks on software security.