Description:

In this workshop we will use the Human Interface Device (HID) capability of Raspberry Pi Pico microcontroller board to emulate keyboard and mouse. This can be used as an alternative to USB Rubber Ducky, originally developed by Hack5.

Outline

Key topics covered in this talk include:

• Introduction to Raspberry Pi Pico, a versatile microcontroller, and its compatibility with CircuitPython, a user-friendly fork of MicroPython, for embedded systems.
• Setting up development environment for Pi Pico followed by a basic program to verify board integrity.
• Installing the Adafruit HID Library.
• Writing non-malicious code for processes such as changing the background wallpaper, devising social media like and upvote bots, and rickrolling victims. (Participants will gain hands-on experience in creating and implementing these scripts themselves).
• Finally, we'll dive into the world of cyber security automation tasks that can be performed with this setup. This includes OS detection, port scanning, reverse shell exploit and much more.

Throughout the workshop, we will emphasise on the importance of responsible and ethical use of these techniques, ensuring that participants understand the potential consequences of any malicious actions. By the end of the workshop, attendees will have a solid understanding of Raspberry Pi Pico, CircuitPython programming, BadUSB device concepts, and various cyber security automation tasks.

Prerequisites:

Basic understanding of MicroPython and Embedded devices is desirable.

Speaker Info:

I'm a Master's student and an open-source contributor at the Fedora Project. I am passionate in topics pertaining to Embedded Systems, Cybersecurity and Operating Systems. During my last internship, I worked as an Embedded and IOT developer in collaboration with IIT Kanpur. This year I also participated in DefCon 9111 India Chapter.

Speaker Links:

1. LinkedIn
2. Github