Post B1RaCeYcO33idbng80 by mathaetaes@infosec.exchange
(DIR) More posts by mathaetaes@infosec.exchange
(DIR) Post #B1RaCeYcO33idbng80 by mathaetaes@infosec.exchange
2025-12-19T23:53:08Z
0 likes, 0 repeats
Who here has opinions about buying a pre-made "System recovery" USB from a no-name company on Amazon?I just ordered one (for free - Amazon Vine), but now that I have I need a good way to see if it's actually legit or if it's teaming with malware.I do a lot of application and network service pentesting and vulnerability discovery, but testing USB is new to me. Can anyone recommend a good guide on assessing the security of USB? I'm treating this thing as if it's a random thumb drive found in a parking lot... but I don't have an existing detonation box and last time I built one, UEFI rootkits were purely theoretical.#infosec #hacking #pentesting #bugbounty https://www.amazon.com/dp/B0FXY26MLV
(DIR) Post #B1RaCfqNbUrQcz7NS4 by face@hostux.social
2025-12-20T15:27:57Z
0 likes, 0 repeats
@mathaetaes Disconnect hard drives. Boot from a another, known to be legit usb drive. Insert new usb stick and dd an image onto another drive. After that you can examine the image safely.