Press X to Pwn: The Trojan Button Box

What if the custom gaming peripheral on your desk was also a hacking tool? This talk covers building a USB button box for truck and flight simulators with toggle switches, ignition key, 3D-printed case, the works. The ESP32-S3 costs about $10, plugs in, shows up as a game controller, no drivers needed. But wait, this thing is basically a Rubber Ducky that actually does something useful. What if one of these buttons deployed a C2 beacon? This talk will cover how to build the button box, why USB HID devices are blindly trusted by operating systems, and demo a device that's a legit game controller AND a hidden keyboard at the same time. Watch a truck sim get played, a button get pressed, and a shell get popped. Attendees will learn how to build their own USB HID implant, understand the attack surface of trusted peripherals, and why "don't plug in random USB devices" is still advice people ignore. No hardware experience needed, all of this was learned from Claude Code and YouTube.