barcOwned Popping Shells with Your Cereal Box
UberKitten and magicspacekiwi presents barcowned popping shells with your cereal box: Barcodes and barcode scanners are ubiquitous in many industries and work with untrusted data on labels, boxes, and even phone scr...
Summary
Architecture and Background
Barcodes and barcode scanners are ubiquitous in many industries and work with untrusted data on labels, boxes, and even phone screens.
Vulnerability Analysis
Most scanners also allow programming via barcodes to manipulate and inject keystrokes. See the problem?
Exploitation and Demonstrations
By scanning a few programming barcodes, you can infect a scanner and access the keyboard of the host device, letting you type commands just like a Rubber Ducky.
Remediation and Defensive Strategies
This culminates in barcOwned—a small web app that allows you to program scanners and execute complex, device-agnostic payloads in seconds. Possible applications include keystroke injection (including special keys), infiltration and exfiltration of data on air-gapped systems, and good ol' denial of service attacks.
Related talks
Main Stage·56 min
Joe Grand
Joe Grand reveals the engineering, puzzle design, and Easter eggs embedded in the DC27 hardware badge.
Main Stage·20 min
Nicolas Oberli
Explores the attack surface of the SD card specification, revealing undocumented commands and firmware update mechanisms that enable persistent device compromise.
Main Stage·37 min
Matt Wixey
Demonstrates malware that weaponizes speakers, headphones, and industrial ultrasonic emitters to cause physical harm, data exfiltration, and device damage.