Questions tagged [keyboard]

9 questions
40
votes
8 answers

Are all USB-based attacks dependent on being able to inject keystrokes?

From what I've seen, USB-based attacks such as RubberDucky need to be able to open a terminal and then execute commands from there, usually to download and then install malware or to open a reverse shell. Is this how most, if not all USB-based…
user942937
  • 983
  • 8
  • 14
4
votes
1 answer

MSTG-PLATFORM-11: Prevent custom third-party keyboards on Android?

The MASVS states in section "V6: Platform Interaction Requirements" MSTG-PLATFORM-11: Verify that the app prevents usage of custom third-party keyboards whenever sensitive data is entered. There are no references for test cases or similar and when…
rumpel
  • 228
  • 1
  • 5
3
votes
1 answer

Is bluetooth keyboard more secure than USB keyboard for a malicious firmware?

There are some threads talking about Bluetooth keyboard security. But I have a different concern. I will only need 4 keys from an external keyboard, Home/End/PageUp/PageDn keys. Because I use them a lot and my laptop keyboard has a bad design (no…
sgon00
  • 133
  • 4
1
vote
0 answers

Does authentication for USB keyboards exist?

I think bluetooth has an authentication measure. As a user, when I get a new bluetooth keyboard, I have to: Go to my computer, search for bluetooth devices Put my keyboard in "pairing mode" My computer displays some random numbers which I have to…
Martin Thoma
  • 3,902
  • 6
  • 30
  • 42
1
vote
1 answer

Apple bluetooth keyboard insecure connection?

From time to time, I see this dialog box pop up on my MacBook Pro screen. It typically happens as the computer wakes up from sleep. Magic keyboard is trying to connect using an unsecured Bluetooth connection. Unsecured Bluetooth accessories can…
dakini
  • 413
  • 1
  • 3
  • 13
1
vote
1 answer

Can I safely sell a used keyboard without risk of new owner recovering previous inputs?

As far as of my knowledge goes, keyboard don't store keystrokes in their memory by default (excluding those bundled with keyloggers). The thing that comes to my mind though is that some keyboards do have some built-in memory for storing user's…
Dominic
  • 45
  • 3
0
votes
1 answer

Do mechanical keyboards only have non-modifiable firmware baked in?

I always used to use a mechanical keyboard to type. Recently, I found a hardware trojan in my keyboard's firmware. Can mechanical keyboard firmware be modified?
kittygirl
  • 101
0
votes
1 answer

Remote monitoring of key strokes — is an RF retro reflector required?

Is it possible to remotely monitor key strokes on a laptop or is an RF retro reflector required? If so, where would be the most likely location such a device would be placed?
Nanya
  • 1
  • 1
-1
votes
2 answers

Hide reverse shell window launched with HID attack

GOAL: the attacker insert into a victim's laptop an USB which act as a keyboard. The payload opens a terminal, executes a reverse shell and hides the terminal. PROBLEM: the tests I did locally (ubuntu 19.04, and digispark as usb) are the…
Maicake
  • 497
  • 1
  • 3
  • 13