[Lab] USB Snooping (Was: kinect hacked almost as a 3d scaner)

[Tom Burns]

Hi Richard,

It's most likely the hardware analyzer is overkill but if you need it to do
a dump we can meet up and do so.  I can't really let it leave my hands as
it's my work's, not mine :)

However you can probably get a similar USB dump using software-only methods.

For windows, http://sourceforge.net/projects/usbsnoop/ is possibly the best.

There's a guide to using it here:
http://jespersaur.com/drupal/book/export/html/21

Some devices (apple ipods for example) detect the presence of libusb or
usbsnoop on the host system and will not work in that case (to prevent
reverse engineering).  In cases like that you need the hardware analyzer (or
when USB communication fails and you don't know if it's the host or slave
that's screwing it up).

Cheers,
Tom



On Wed, Nov 17, 2010 at 9:31 AM, Richard Guy Briggs <rgb at tricolour.net>wrote:

> On Wed, Nov 17, 2010 at 09:01:18AM -0800, Tom Burns wrote:
> > For people interested in their own USB device hacking ladyada posted an
> > amazing tutorial/walkthrough of the technique:
> >
> > http://ladyada.net/learn/diykinect/
> >
> > If anyone has any devices they want a dump from, I happen to have the
> same
> > Beagle USB protocol analyzer sitting on my desk at work right now...
>
> Hmmm, that might help to make use of the West Mountain Radio CBA2 and
> CBA3 battery analysers...
>
> There's guys in the Canberra hacker lab making open source hardware to
> do the same thing, multi-channel...
>
> > Tom
>
>        slainte mhath, RGB
>
> --
> Richard Guy Briggs               --  ~\    -- ~\            <
> hpv.tricolour.net>
> <www.TriColour.net>                --  \___   o \@       @       Ride yer
> bike!
> Ottawa, ON, CANADA                  --  Lo_>__M__\\/\%__\\/\%
> Vote! -- <greenparty.ca
> >_____GTVS6#790__(*)__(*)________(*)(*)_________________
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://artengine.ca/pipermail/lab/attachments/20101117/16c0b9a7/attachment.htm>