Koyarwar Sniffer USB $34: Kama motsin linzamin kwamfuta da maɓallan madannai ta amfani da Wireshark

Koyarwar Sniffer USB $34: Kama motsin linzamin kwamfuta da maɓallan madannai ta amfani da Wireshark

Koyarwar USB Sniffer: Kama Motsin Linzami da Maɓallan Rubutu ta Amfani da Wireshark

A cikin wannan aikin, muna bincika yadda za a iya amfani da na'urar USB sniffer don sa ido da nazarin sadarwar USB tsakanin kwamfuta da na'urorin shigarwa na yau da kullun kamar linzami da madannai. Ta hanyar sanya USB sniffer a tsakiyar hanyar sadarwa tsakanin na'urar USB da kwamfuta, duk fakitin USB da ke wucewa za a iya kama su da nazarin su a lokaci guda ta amfani da Wireshark.

Wannan koyarwa tana nuna yadda motsin linzami, danna maɓallai, har ma da maɓallan rubutu (ciki har da kalmomin sirri) za a iya gani a matakin ka'idar USB. An yi aikin ne don dalilai na ilimi don fahimtar yadda na'urorin USB HID ke aiki a ciki da kuma dalilin da yasa tsaron jiki yake da muhimmanci kamar tsaron software.

Menene USB Sniffer?

USB sniffer wata na'urar hardware ce da ke zaune tsakanin na'urar USB (kamar linzami ko madannai) da kwamfuta. Tana watsa bayanai a bayyane don na'urar ta yi aiki yadda ya kamata, yayin da take kama da fallasa fakitin bayanan USB ta hanyar daban don sa ido.

A cikin wannan aikin, USB sniffer yana aiki azaman na'urar wucewa:

• Linzamin USB ko madannai yana haɗawa da sniffer
• Sniffer yana haɗawa da kwamfuta
• Wata hanyar USB daban daga sniffer tana zuwa kwamfutar sa ido da ke gudanar da Wireshark

Duk zirga-zirgar USB da ke wucewa tsakanin na'urar da kwamfuta za a iya kama su da tantance su ba tare da shafar aikin yau da kullun ba :contentReference[oaicite:0]{index=0}.

Manyan Abubuwan Da Aka Yi Amfani Da Su

Kayan Aikin USB Sniffer

USB sniffer da aka yi amfani da shi a cikin wannan aikin ya dogara ne akan ƙirar FPGA da Alex Tarasov ya ƙirƙira. Cikakken ƙirar ya haɗa da firmware, fayilolin PCB, da kayan aikin software. Na'urar kasuwanci da aka yi amfani da ita an riga an ɗora firmware a ciki, don haka ba a buƙatar sake saita ko daidaita shi kafin amfani.

A ciki, sniffer yana shiga cikin layukan bayanan USB daban-daban kuma yana nuna fakitin zuwa wata hanyar USB daban wacce Wireshark zai iya sa ido.

Linzami da Madannai (Na'urorin USB HID)

Dukansu linzami da madannai na'urorin USB HID ne. Waɗannan na'urorin suna aika rahotanni na lokaci-lokaci zuwa kwamfutar da ke bayyana yanayinsu:

• Linzami: yanayin maɓallai, motsin X, motsin Y
• Madannai: maɓallan gyara da lambobin maɓallan rubutu

Ana aika waɗannan rahotanni a bayyane, ba a ɓoye su ba ta hanyar USB, wanda shine dalilin da yasa sniffer zai iya kama su.

Kwamfuta Mai Wireshark

Ana amfani da Wireshark don kama da nazarin fakitin USB. A Windows, kama USB yana buƙatar ƙarin abubuwa don ba da damar shiga zirga-zirgar USB a matakin direba.

Haɗin Waya da Sadarwa

Ana haɗa USB sniffer a tsakiyar hanyar sadarwa tsakanin na'urar USB da kwamfuta.

• Haɗa linzami ko madannai zuwa tashar shigar USB ta sniffer
• Haɗa tashar fitar USB ta sniffer zuwa kwamfuta
• Haɗa tashar sa ido ta USB ta sniffer zuwa kwamfuta ɗaya ko wata da ke gudanar da Wireshark

Na'urar USB tana ci gaba da aiki yadda ya kamata yayin da ake nuna zirga-zirgarta zuwa tashar sa ido.

Shigar da Software Da Ake Bukata

Shigar da Wireshark

Dole ne a shigar da Wireshark a kwamfutar sa ido. Yayin shigarwa a Windows, yana da muhimmanci a kunna ɓangaren tallafin kama USB. Ba tare da wannan direba ba, ba za a iya kama zirga-zirgar USB ba.

Da zarar an shigar, Wireshark zai nuna hanyoyin kama USB tare da hanyoyin sadarwar yanar gizo.

Direban USB Sniffer (Windows)

Ana buƙatar ƙaramin fayil mai taimako a Windows don ba da damar Wireshark ya sami damar bayanan USB daga kayan aikin. Dole ne a sanya wannan fayil a cikin hanyar tsarin (misali, kai tsaye a ƙarƙashin C:\Program Files\Wireshark\extcap ko duk inda ka shigar da Wireshark) don Wireshark ya iya sadarwa da sniffer.

Kama Bayanan USB a Wireshark

Bayan kunna Wireshark, zaɓi hanyar USB sniffer kuma fara kama. Da farko, babban adadin zirga-zirgar USB marasa alaƙa na iya bayyana.

Aiwatar da Tacewar USB

Don mayar da hankali kawai kan bayanan USB masu dacewa, ana amfani da tacewar nuni:

usbll

Wannan tacewa yana nuna fakitin USB Link Layer kawai, waɗanda ke ƙunshe da ainihin ma'amalolin USB da ke tsakanin na'urar da mai masaukin.

Ana buƙatar ƙarin tacewa saboda USB yana samar da babban adadin bayanai.

Tacewa ta Lambar Fakitin (PID)

Za a iya gano fakitin bayanan linzami da madannai ta takamaiman lambobin fakitin (PID). A cikin wannan aikin, PID ɗin da aka lura da su sune:

• 0xC3
• 0x4B

Ana za iya tace waɗannan a cikin Wireshark ta amfani da:

usbll.pid == 0xC3 || usbll.pid == 0x4B

Wannan tacewa tana ware rahotannin HID da ke zuwa daga linzamin kwamfuta ko madannai.

Fahimtar Bayanan Linzamin Kwamfuta

Lokacin da aka motsa linzamin kwamfuta ko aka danna shi, ana aika rahotannin HID akai-akai. Kowane rahoto yana ƙunshe da bytes da yawa:

• ID na Rahoto
• Halin maɓallan (hagu, dama, tsakiya)
• Motsi na axis X
• Motsi na axis Y

Ta hanyar lura da canjin ƙimar bytes a cikin Wireshark, ana iya fahimtar alkiblar motsi da saurin linzamin kwamfuta. Ko da ba a danna ba, motsi kaɗai yana haifar da ayyukan USB da ake iya gani.

Fahimtar Bayanan Madannai

Ana aika bayanan madannai azaman rahotannin HID waɗanda ke ƙunshe da lambobin scan maimakon ƙimar ASCII. Kowane maɓalli yana dacewa da takamaiman ID na amfani da HID.

Misali:

• 0x04 → Harafin A
• 0x05 → Harafin B
• 0x0E → Harafin K

Manyan haruffa da ƙananan haruffa ana tantance su ta hanyar maɓallan canza kamar Shift, waɗanda ke bayyana a cikin bytes daban-daban na rahoton.

Maɓallan ayyuka kamar F12 suma suna haifar da lambobin scan na musamman waɗanda za a iya gani kai tsaye a cikin fakitin da aka kama.

Abubuwan Tsaro

Wannan aikin yana nuna a sarari cewa zirga-zirgar USB HID ba a ɓoye ta ba. Idan an sanya na'urar cutarwa a tsakanin madannai da kwamfuta ta jiki, za ta iya kama kowane bugun maɓalli, gami da sunayen masu amfani da kalmomin shiga.

Wannan shine dalilin da ya sa tsaron USB, kayan aikin da aka amince da su, da kula da shiga ta jiki ke da mahimmanci a wurare masu muhimmanci.

Takaitaccen Nunin

A cikin wannan nunin, an kama kuma an fassara waɗannan cikin nasara:

• Motsin linzamin kwamfuta da ayyukan maɓallan
• Danna maɓallan madannai guda ɗaya
• Maɓallan ayyuka da maɓallan canza
• Cikakkun kalmomi da aka buga a madannai

Na'urar kama USB tana aiki a ɓoye, yana sa ganowa ya yi wahala ba tare da binciken jiki ba.

Ƙarshe

Wannan aikin na'urar kama USB yana ba da nunin aiki mai ƙarfi na yadda sadarwar USB ke aiki a matakin mafi ƙanƙanta. Ta hanyar haɗa kayan aikin kama na musamman tare da Wireshark, yana zama mai yiwuwa a ga ainihin yadda na'urorin shigarwa ke sadarwa da kwamfutoci.

Aikin ya dace don koyon ka'idojin USB, tsarin rahotannin HID, da la'akarin tsaro na ainihin duniya. Duk da yake an nuna shi da linzamin kwamfuta da madannai, ƙa'idodi iri ɗaya sun shafi sauran na'urorin USB da yawa.

Sauke Software

Ƙarin aikace-aikacen Windows usb_sniffer_win.exe da ake buƙata don kama bayanan USB tare da Wireshark yana samuwa don saukewa a ƙasan wannan labarin.

Hotuna

usb_sniffter-3

usb_sniffter-4

usb_sniffter-5

usb_sniffter-6

USB Sniffer

usb_sniffter-10

usb_sniffter-11

usb_sniffter-12

usb_sniffter-8_software

usb_sniffter-9

usb-sniffer-wiring-keyboard

usb-sniffer-wiring-mouse

usb_sniffter-3

usb_sniffter-4

usb_sniffter-5

usb_sniffter-6

USB Sniffer

usb_sniffter-10

usb_sniffter-11

usb_sniffter-12

usb_sniffter-8_software

usb_sniffter-9

usb-sniffer-wiring-keyboard

usb-sniffer-wiring-mouse