0xOPOSEC 24/02/2022 Challenge
Index Challenge Description Solving Challenge References Description “I just got this new keyboard from Vodaphone Portugal, but it looks like something fishy is going on. Could you help me?” Solving Opening the pcap file It turns out to be a USB communication capture The file was small and had USB_INTERRUPT events that encode key presses After a little bit of google fu, I found that the Leftover Capture Data field has a series of 8 bytes strung together (the third byte is the Usage ID for the key pressed)...