While I was at Shmoocon 2010, I was given a Phantom Keystroker. It's a neat little USB dongle which looks like a thumbdrive that you could surreptitiously install in the back of someone's computer. The Phantom Keystroker acts as a keyboard/mouse USB HID (Human Interface Device) to send keystrokes, move the mouse pointer around randomly, toggle caps lock and other things to annoy your co-workers and loved ones. This started me thinking, what if you could make something like this that was programmable? There are all sorts of things you could do with it.
[...] All sorts of things could be done:
1. Add a user to the box or the domain. 2. Run a program that sets up a back door. 3. Copy files to your thumbdrive (see example code for how to find the flash drive by volume name) 4. Go to a website they have a cookie for, and do some sort of transaction (sort of like CSRF, but hardware based).