And Franck will use some practical malware forensics on the malicious HID devices, and what information can be extracted from a chip, and finally some takeaways.įranck: So first things first, what is an HID device? HID stands for human interface devices, and basically it’s a device that takes input from a user, you know them as a keyboard or a mouse. We will spend some time on attacker possibilities Franck is doing the blue team, so the defence side I am on the red team, so the attacker side. The agenda today: we will start with a short introduction about HID devices, and typically the presentation will look at malicious HID devices. We represent what is HID devices just after. We are going to talk about malicious HID devices. If you want to test the communication with a HID device and need a graphical interface for sending messages and checking the responses, you should try USB HID Terminal and assess its performance by yourself.Arthur Villeneuve and Franck Bitsch discuss their research at DFRWS EU 2019.Arthur: Good morning. This makes the program suitable for seasoned users with some experience with HID communication testing. Moreover, the interface does not include any documentation that clearly explains the usage or additional requirements.

NET version but the distribution does not include the mcHID.dll which you need to deploy manually. During the installation the app checks and downloads the required.

It can be used for checking if the device responds correctly to a certain message.Īlthough the interface is simple and allows you to quickly access the message and response, getting a response from your hardware is not an easy task. This tools intends to help you send requests to the connected devices and view their response in the main window. The functions included in the class enable the computer to properly recognize the hardware and interpret the signals. The Human Interface Device class allows manufactures to create devices that communicate with the computer and the installed applications through an USB port. The program aims to provide you with an easy to use method for sending messages. USB HID Terminal is a compact tool designed to make use of the HID class in order to test the communication to a USB device.

Usb hid test tool windows