SD Card Logger

SD-Card Logger

• Description
• What you need
• What does the mod do
• Examples
• Attack by a RubberDucky
• Attack on a stick via PC
  
  

Description:

The SD-Card Logger does exactly what it sounds like. All information that is output via serial with the standard USBvalve is also stored on an SD card.

What you need:

• SPI SD adapter, the mapping can be found in the "readme".
• A FAT32 formatted SD card
  
  

What does the mod do?

• Create a text file called "datalog.txt"
• Save all serial outputs in the "datalog.txt"
• New sessions are marked with "----------NEW SESSION----------".
• If the "datalog.txt" exceeds the 5MB size, a warning is issued via the display.
  
  

Examples:

Attack by a RubberDucky:

The RubberDucky should open the notepad and ask 42 times the most important question.

datalog.txt output:

----------NEW SESSION----------

CDC Device attached, idx = 0
Mass Device attached, address = 1
HID device address = 1, instance = 0 mounted
VID = 239a, PID = 80f4
HID Interface Protocol = None
GUI+rnotepad.exe
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
the answer to life the universe and everything?
CDC Device unmounted, idx = 0
Mass Device unmounted, address = 1

Attack on a stick via PC:

The attacker should overwrite the "autorun.inf" and copy a "bad.exe" to a possible stick.

datalog.txt output:

----------NEW SESSION----------

Write LBA: 7   Size: 512
4d79447269766520 202020080000af60 MyDrive    ....`

Write LBA: 1   Size: 512
f8ffffffffffffff ffff0f0000000000 ................

Write LBA: 7   Size: 512
4d79447269766520 202020080000af60 MyDrive    ....`

Write LBA: 1   Size: 512
f8ffffffffffffff ffffffff00000000 ................

Write LBA: 7   Size: 512
4d79447269766520 202020080000af60 MyDrive    ....`

Write LBA: 7   Size: 512
4d79447269766520 202020080000af60 MyDrive    ....`

Write LBA: 13   Size: 512
5b6175746f72756e 5d0d0a6f70656e3d [autorun]..open=

Write LBA: 7   Size: 512
4d79447269766520 202020080000af60 MyDrive    ....`

Write LBA: 7   Size: 512
4d79447269766520 202020080000af60 MyDrive    ....`

Write LBA: 1   Size: 512
f8ffffffffffffff ffffffffff0f0000 ................

Write LBA: 7   Size: 512
4d79447269766520 202020080000af60 MyDrive    ....`

Write LBA: 7   Size: 512
4d79447269766520 202020080000af60 MyDrive    ....`

Write LBA: 14   Size: 512
406563686f206f66 660d0a636c730d0a @echo off..cls..