USB Pentesting Toolkit

Project Title

Project Area of Specialization

Cyber Security

Project Summary

The proposed system consists of hardware and code for payloads for penetration testing. Arduino based micro controller will be used for creating the device that can penetrate as well as collect required information from the target system. This Arduino based pen-drive will be able to penetrate the computer systems and can also collect the internal information of the computer system and user files.The proposed system consists of hardware and code for payloads for penetration testing. Arduino based micro controller will be used for creating the device that can penetrate as well as collect required information from the target system. This Arduino based pen-drive will be able to penetrate the computer systems and can also collect the internal information of the computer system and user files.

Project Objectives

This device will be able to run different scripts for pen-testing and for Information Gathering, can use Windows Powershell commands for automation of different administrative tasks, can use Mimikatz utility that enables the viewing of credential information from the Windows ISASS (Local Security Authority Subsystem Service), registry editing, PHP and web server to exploit Windows vulnerability and launch an attack to reveal victim’s information such as id and password. By using this device an attacker just need few second's access to insert this USB pen-testing toolkit into the victim's machine and then it will work automatically and will perform the desired tasks. The HID enabled devices are only limited to what you can accomplish with a keyboard. This project shows how important protecting your devices from malicious hackers can be. They need only mere seconds to steal very confidential information.

Project Implementation Method

Benefits of the Project

Many institutions have their strong cybersecurity solutions for their internal as well as external defense. They use firewalls, intrusion detection systems, intrusion prevention systems and anti-viruses, but most of them are not fully capable of detecting a USB pen drive that act as a (HID) is used to penetrate and collect information of target system.