OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Dailydave] USB Drives that think they're CDROMs

From: Dave Korn (dave.kornartimi.com)
Date: Wed Jun 14 2006 - 08:40:25 CDT


On 12 June 2006 21:20, Robert Wesley McGrew wrote:

> Yesterday I picked up a SanDisk Cruzer Micro 512MB drive with "U3
> Smart" functionality. U3 is a platform for developing applications
> that can run "cleanly" from a USB drive. The way it's implemented, at
> least on this Cruzer, is that it pretends to be two drives at once:
> the large main drive, and a small 6 meg USB CDROM drive. This allows
> it to write-protect the U3 software and autorun it whenever you stick
> it into a windows machine (kind of annoying). After tinkering with it
> for a while, I've figured out a way to convince the update utility to
> write an arbitrary small ISO to to the normally unchangeable CDROM:
>
> http://cse.msstate.edu/~rwm8/hackingU3/

  Good stuff! I've been wanting to get my hands on one of these for a while.

  BTW if setting up a webserver seems too much like hard work, it should be
trivial to hexedit the URL in the binary into a file:// form that should just
transparently work. It's in Unicode at around 0x4a34a0. You'll also see a
couple of other URLs there as well as the one you mentioned...

http://u3.sandisk.com/download/apps/lpinstaller/isofiles/cruzer-autorun.iso
http://u3.sandisk.com/download/apps/lpinstaller/isofiles/sandisk-lp.iso
http://u3.sandisk.com/download/apps/lpinstaller/isofiles/sandisk-lp-no-autorun
.iso

    cheers,
      DaveK
--
Can't think of a witty .sigline today....

_______________________________________________
Dailydave mailing list
Dailydavelists.immunitysec.com
http://lists.immunitysec.com/mailman/listinfo/dailydave