usbsas

usbsas 是一个免费开源（GPLv3）工具和框架，用于安全地读取不受信任的 USB 大容量存储设备。 概述 遵循深度防御和最小权限原则，usbsas 的目标是减少 USB 栈的攻击面。为此，大多数通常在（特权）内核空间中执行的 USB 相关任务（解析 USB 数据包、SCSI 命令、文件系统等）已被移至用户空间，并分离到不同的进程中（微内核风格），每个进程在其受限的 seccomp（安全计算模式）中执行。它运行在 GNU/Linux 上，采用 Rust 编写。 使用场景 自助终端 / 浸羊站，用于安全地将文件从不受信任的 USB 设备传输到受信任的设备 对不受信任的 USB...

USB Spy

USB SPY usb-spy 是一款基于支持 WiFi 或以太网的微控制器构建的 USB 大容量存储流量分析工具。 该板卡向目标系统暴露一个磁盘镜像（FAT 或任意文件系统）作为伪装的 USB 大容量存储设备，而实际存储数据则由远程服务器通过 WiFi 或以太网提供。这种架构使 usb-spy 能够拦截并分析目标系统执行的每一次块访问。 除了原始块级追踪之外，usb-spy 还能理解文件系统，并将每个被访问的块映射回对应的文件和目录，使您能够立即看到正在读取或写入的是哪个文件，而不仅仅是原始扇区号。 此外，usb-spy 还可以通过 JSON 配置文件自定义设备属性（如厂商 ID、产品...

ATAboy

如果您不想自行制作，可以在以下地址购买硬件：https://obsoletetech.us/products/ataboy-an-open-source-legacy-ide-usb-bridge ATAboy 专为复古计算爱好者、数据恢复专家和档案管理员设计。它可以读写最古老的 IDE 硬盘，无需“中间”的复古计算机！ ATAboy 是一个用户友好的桥接器，可将经典 IDE（PATA）硬盘通过 USB 连接到现代计算机，并作为标准 USB 大容量存储设备使用。市面上廉价的现代适配器通常只兼容较新的“LBA”类型驱动器，而 ATAboy 能够支持最早期的仅 CHS、PIO Mode 0 ...

Chimera

Chimera 硬件仿真与近程利用 为什么 Hak5 的设备又重又显眼。我的手机里有一个完整的 Linux 内核，所以我让它干同样的活——HID 仿真、RNDIS、大容量存储，全套都直接通过 ConfigFS 实现。不需要额外硬件，也不会有线从包里晃出来。 插到目标机器上，选一个 payload，运行。按键直接写入 /dev/hidg0，中间没有任何多余环节。 功能 通过 ConfigFS 实现原生 HID — 完全绕过 Android 的 USB 协议栈，直接把字节写到 /dev/hidg0。速度快，而且大多数 EDR 只会把它当成普通键盘。 设备端 DuckyScript —...

MK4001MTD-USB-Bridge

MK4001MTD USB 桥接器 RP2040 Pico 固件，将东芝 MK4001MTD 0.85英寸 SDIO 微型硬盘桥接为 USB 大容量存储设备。 MK4001MTD 是一款 4 GB 微型硬盘，最初用于诺基亚 N91 音乐手机和一些其他设备，如 MP3 播放器或 U 盘，当时闪存仍然相当昂贵。 你可能见过一些介绍声称这款硬盘使用 MMC 协议，但实际上这是不正确的。我对此进行了一段时间的研究：我尝试构建一个 8 位 MMCplus 读卡器，并测试了不同的 SD/MMC 读卡器，但没有成功。最后，我买了一部诺基亚 N91 来捕获逻辑信号，并确认它实际使用的协议。...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: udc: remove warning when queue disabled ep It is possible for this issue to occur when the mass storage function tries to queue requests from the main thread. However, other threads may already disable the endpoint when the...

CVE-2026-69527

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally...

CVE-2026-69490

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-68839

Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network...

EUVD-2026-73699

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-69490

CVE-2026-69490 is an out-of-bounds read vulnerability in the Windows USB Mass Storage Class Driver that allows an unauthorized attacker to elevate privileges via a physical attack . The CVSS 3.1 base score is 6.8 (Medium) , reflecting the physical attack vector requirement (AV:P), low complexity,...

EUVD-2026-73403

Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network...

CVE-2026-68839

CVE-2026-68839 is a heap-based buffer overflow in the Windows USB Mass Storage Class Driver , allowing an unauthorized attacker to execute code over a network. Microsoft rates it CRITICAL with a CVSS 3.1 score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating network-exploitable, no privil...

CVE-2026-69527

An out-of-bounds read vulnerability in the Windows USB Mass Storage Class Driver allows an authorized local attacker to disclose information. The CVSS v3.1 score is 5.5 (Medium) with a local attack vector, low privileges required, and high confidentiality impact. CISA's SSVC assessment indicates ...

EUVD-2026-73005

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally...

Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network...

Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack...

KB5122878: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (September 2026)

The remote Windows host is missing security update 5122878. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

KB5124012: Windows 11 Version 26H1 Security Update (September 2026)

The remote Windows host is missing security update 5124012. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

KB5122871: Windows Server 2025 Security Update (September 2026)

The remote Windows host is missing security update 5122871. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...