[XCSSA] USB reverse-engineering

xcssa@xcssa.org xcssa@xcssa.org
Thu, 5 Oct 2006 21:04:09 -0500


------=_Part_12433_22256951.1160100249966
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

There is a windows program that will sniff the USB bus and record all the
communications with a device.  I don't know the name of it but it's been
referenced on the EVDO forums a bit.

I've also read of some hardware solutions, but they've all seemed a bit more
trouble than they are worth.

--anton


On 10/5/06, xcssa-admin@xcssa.org <xcssa-admin@xcssa.org> wrote:
>
> So,
>
> Simple question but don't know a more appropriate forum.
>
> How would I go about spying on USB traffic so that I can
> reverse-engineer a device?
>
> I have a screen-locker wireless dongle with a matching small
> CR2032-powered transmitter, and I believe it appears as a joystick (!)
> to Linux:
>
> [17969247.140000] usb 1-1.1: new low speed USB device using uhci_hcd
> and address 10
> [17969247.320000] input: KeyMark Semi. Wireless PC Lock as
> /class/input/input13
> [17969247.320000] input: USB HID v1.10 Joystick [KeyMark Semi.
> Wireless PC Lock] on usb-0000:00:11.2-1.1
>
> What I want to do is write software to lock my screen when the
> transmitter goes out of range, but in Linux.  Because I'm too
> forgetful to do it manually, and at work here people have a habit of
> sending out emails saying you'll be buying lunch or something
> embarrassing if they notice your terminal unlocked....
> --
> Enhance your calm, fellow citizen; it's just ones and zeroes.
> Unix "guru" for rent or hire -><- http://www.lightconsulting.com/~travis/
> GPG fingerprint: 9D3F 395A DAC5 5CCC 9066  151D 0A6B 4098 0C55 1484
> _______________________________________________
> XCSSA mailing list
> XCSSA@xcssa.org
> http://xcssa.org/mailman/listinfo/xcssa
>

------=_Part_12433_22256951.1160100249966
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

There is a windows program that will sniff the USB bus and record all the communications with a device.&nbsp; I don't know the name of it but it's been referenced on the EVDO forums a bit.<br><br>I've also read of some hardware solutions, but they've all seemed a bit more trouble than they are worth.
<br><br>--anton<br><br><br><div><span class="gmail_quote">On 10/5/06, <b class="gmail_sendername"><a href="mailto:xcssa-admin@xcssa.org">xcssa-admin@xcssa.org</a></b> &lt;<a href="mailto:xcssa-admin@xcssa.org">xcssa-admin@xcssa.org
</a>&gt; wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">So,<br><br>Simple question but don't know a more appropriate forum.<br>
<br>How would I go about spying on USB traffic so that I can<br>reverse-engineer a device?<br><br>I have a screen-locker wireless dongle with a matching small<br>CR2032-powered transmitter, and I believe it appears as a joystick (!)
<br>to Linux:<br><br>[17969247.140000] usb 1-1.1: new low speed USB device using uhci_hcd<br>and address 10<br>[17969247.320000] input: KeyMark Semi. Wireless PC Lock as /class/input/input13<br>[17969247.320000] input: USB HID 
v1.10 Joystick [KeyMark Semi.<br>Wireless PC Lock] on usb-0000:00:11.2-1.1<br><br>What I want to do is write software to lock my screen when the<br>transmitter goes out of range, but in Linux.&nbsp;&nbsp;Because I'm too<br>forgetful to do it manually, and at work here people have a habit of
<br>sending out emails saying you'll be buying lunch or something<br>embarrassing if they notice your terminal unlocked....<br>--<br>Enhance your calm, fellow citizen; it's just ones and zeroes.<br>Unix &quot;guru&quot; for rent or hire -&gt;&lt;- 
<a href="http://www.lightconsulting.com/~travis/">http://www.lightconsulting.com/~travis/</a><br>GPG fingerprint: 9D3F 395A DAC5 5CCC 9066&nbsp;&nbsp;151D 0A6B 4098 0C55 1484<br>_______________________________________________<br>XCSSA mailing list
<br><a href="mailto:XCSSA@xcssa.org">XCSSA@xcssa.org</a><br><a href="http://xcssa.org/mailman/listinfo/xcssa">http://xcssa.org/mailman/listinfo/xcssa</a><br></blockquote></div><br>

------=_Part_12433_22256951.1160100249966--