full-disclosure - USB Auto run function

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: rlanguy at hotmail.com (Lan Guy)
Subject: USB Auto run function

Not quite, In Windows XP SP2 the system can read the autorun.inf  in
removeable media (specifically USB Flash Drives) and start a program or
install etc like a CD rom does.

However I haven't seen it work.

Lan guy

----- Original Message ----- 
From: "martin paul" <bigsmarty66@...mail.com>
To: <full-disclosure@...ts.netsys.com>
Sent: Thursday, June 17, 2004 3:15 PM
Subject: [Full-Disclosure] USB Auto run function


> I have been interested in a potential exploit that may or may not be an
> issue, I read lately that a potential malicious file could enter a system
> via a USB Memory stick with a structured autorun.pif , and this file would
> operate even if the screen lock is activated .
>
> _________________________________________________________________
> Get a Credit Card - 60 sec online response:
>
http://ad.au.doubleclick.net/clk;8097459;9106288;b?http://www.anz.com/aus/promo/qantas5000ninemsn
>    [AU only]
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>