SECTOR 2022: The Power of Pico


I am delighted to share that I will be speaking at Sector this year in the tools sector. Although the SecTor schedule is not yet finalized, I am currently listed as speaking at 10:15 a.m. on October 6e. The speech, The Power of Pico: Replacing Expensive Toys with the Raspberry Pi Pico, will explain how to use a Raspberry Pi Pico to perform BadUSB attacks. There are commercial tools that will perform these attacks, such as the Hak5 USB rubber duck and the FlipperZerobut the idea here is to make it as cheap and accessible as possible.

As is often the case in technology, this speech is not based on a new idea. Even the idea of ​​using the Pico as a hacking device isn’t new. However, several activities motivated me to push my version of the idea further. In the summer of 2021 I had built a cheap StreamDeck alternative using a Pico and an RGB keyboard. This work got me really interested in using Pico as an HID and I wanted to do more. When I found out that SecTor 2021 was on and we would be bringing back the IoT Hack Lab, I was excited to meet colleagues I hadn’t seen since before the pandemic and to bring something new and exciting to surprise them with. So, I sat down and wrote some code to perform a BadUSB attack using the Pico and brought the device with me to SecTor in 2021.

I ended up demonstrating the thing for the duration of the conference. People constantly came to discuss it and see it in action, genuinely impressed with its simplicity. I spoke with a few people who had written their own implementations for use in their own research, but hadn’t discussed them publicly. That’s when I decided to harden my code and give it a proper release, which is exactly what will happen at SecTor.

During the lecture, we’ll discuss Pico itself and look at the Python code I’ve developed to make it do what it does. We’ll talk about where to get my code and the payloads I’ve developed for demonstration purposes. If you’re new to microcontrollers, you’ll learn a few things, but even if you’ve used similar projects in the past, you might still find some tips and tricks that can be used to your advantage in the future. .

We all know that the first session of the day on the second day of a jerk is where people sip coffee and shake off their hangovers. If you’re looking for a fun, geeky conversation that isn’t going to melt your mind but is still going to be interesting, then I recommend you come hang out with me for The power ohf the Pico: replacing expensive toys with the Raspberry Pi Pico.


Comments are closed.