Hacking ble smartwatch

•

0 j'aime•218 vues

idsecconf

Hacking ble smartwatch - Rama Tri Nanda

Internet

Hacking
BLE SmartWatch
IDSECCONF 2019, Cirebon
SMRX86

#whoami
  Independent security researcher.
  My job is doing trick to impress client.
  Speaker Idsecconf 2013, 2014, 2015, etc.

Relevant Research
  Leo Soares. “Mi Band 2, Part 1: Authentication.”, Internet: https://
leojrfs.github.io/writing/miband2-part1-auth/, Nov. 25, 2017.
  David Lodge, “Reverse Engineering BLE from Android apps with Frida”,
Internet: https://www.pentestpartners.com/security-blog/reverse-engineering-
ble-from-android-apps-with-frida/, Feb 23, 2018.

BASIC BLE
IDSECCONF 2019, Cirebon
SMRX86

Trial & Error/Success
IDSECCONF 2019, Cirebon
SMRX86

Android_hcidump
(/data/misc/bluetooth/logs/btsnoop_hci.log)

(Active Sniffing) FRIDA
(mifit ver 3.3.2)

(Active Sniffing) FRIDA
WHERE IS
CHAR UUID
& HANDLE

Mapping
Authentification
IDSECCONF 2019, Cirebon
SMRX86

POC script is adjustment of recent
@leojrs (0x08 > 0x00)

Recommandé

Hacking oximeter untuk membantu pasien covid19 di indonesia - Ryan fabellaidsecconf

Servidor FTP con usuarios en LDAPCarlos Escribano

Rama Tri Nanda - NFC Hacking Hacking NFC Reverse Power Supply Padlock.pdfidsecconf

FeliCa/NFCの概説とAndroidの対応状況Isao Soma

Serverspecの活用tips紹介Daisuke Ikeda

HTTP2 最速実装〜入門編〜Kaoru Maeda

超簡単! JettyをWindowsにインストールShin Tanigawa

Dockerと外部ルータを連携させる仕組みを作ってみたnpsg

Recommandé

Hacking oximeter untuk membantu pasien covid19 di indonesia - Ryan fabellaidsecconf

Servidor FTP con usuarios en LDAPCarlos Escribano

Rama Tri Nanda - NFC Hacking Hacking NFC Reverse Power Supply Padlock.pdfidsecconf

FeliCa/NFCの概説とAndroidの対応状況Isao Soma

Serverspecの活用tips紹介Daisuke Ikeda

HTTP2 最速実装〜入門編〜Kaoru Maeda

超簡単! JettyをWindowsにインストールShin Tanigawa

Dockerと外部ルータを連携させる仕組みを作ってみたnpsg

hacking_ble_smartwatch @idsecconf2019 cirebonRama Nanda

From Reversing to ExploitationSatria Ady Pradana

IRJET- Design and Development Modish Smart Key Box using RFID based on Ard...IRJET Journal

From Reversing to Exploitation: Android Application Security in EssenceSatria Ady Pradana

Mobile Penetration Testing: Episode III - Attack of the CodeNowSecure

APIsecure 2023 - Android Applications and API Hacking, Gabrielle Botbolapidays

Smart Attendance System using Raspberry Piijtsrd

A Study on Modern Methods for Detecting Mobile MalwareIRJET Journal

IRJET-Enhancement of Security using 2-Factor Authentication, 2nd Factor being...IRJET Journal

11272019 SafeAssign Originality Reporthttpsucumberlan.docxaulasnilda

ESP32 CAM Face Detection Door LockIRJET Journal

Keyloggers A Malicious Attackijtsrd

Liferay Italy Symposium 2015 Liferay Mobile SDK and Liferay ScreensDenis Signoretto

draft.ResearchPosterAbdulaziz Almass

Introduction to Android Application Security Testing - 2nd Sep 2017Satheesh Kumar V

iOS Security: The Never-Ending Story of Malicious ProfilesYair Amit

Fabrizio Cornelli - Securing Android Apps by Reversing - Codemotion Milan 2018Codemotion

Sbvlc secure barcode based visible light communication for smartphonesLeMeniz Infotech

apidays New York 2023 - Android Applications and APIs Hacking, Gabrielle Botb...apidays

Attack Vectors in Biometric Recognition SystemsClare Nelson, CISSP, CIPP-E

idsecconf2023 - Mochammad Riyan Firmansyah - Takeover Cloud Managed Router vi...idsecconf

idsecconf2023 - Neil Armstrong - Leveraging IaC for Stealthy Infrastructure A...idsecconf

Contenu connexe

Similaire à Hacking ble smartwatch

hacking_ble_smartwatch @idsecconf2019 cirebonRama Nanda

From Reversing to ExploitationSatria Ady Pradana

IRJET- Design and Development Modish Smart Key Box using RFID based on Ard...IRJET Journal

From Reversing to Exploitation: Android Application Security in EssenceSatria Ady Pradana

Mobile Penetration Testing: Episode III - Attack of the CodeNowSecure

APIsecure 2023 - Android Applications and API Hacking, Gabrielle Botbolapidays

Smart Attendance System using Raspberry Piijtsrd

A Study on Modern Methods for Detecting Mobile MalwareIRJET Journal

IRJET-Enhancement of Security using 2-Factor Authentication, 2nd Factor being...IRJET Journal

11272019 SafeAssign Originality Reporthttpsucumberlan.docxaulasnilda

ESP32 CAM Face Detection Door LockIRJET Journal

Keyloggers A Malicious Attackijtsrd

Liferay Italy Symposium 2015 Liferay Mobile SDK and Liferay ScreensDenis Signoretto

draft.ResearchPosterAbdulaziz Almass

Introduction to Android Application Security Testing - 2nd Sep 2017Satheesh Kumar V

iOS Security: The Never-Ending Story of Malicious ProfilesYair Amit

Fabrizio Cornelli - Securing Android Apps by Reversing - Codemotion Milan 2018Codemotion

Sbvlc secure barcode based visible light communication for smartphonesLeMeniz Infotech

apidays New York 2023 - Android Applications and APIs Hacking, Gabrielle Botb...apidays

Attack Vectors in Biometric Recognition SystemsClare Nelson, CISSP, CIPP-E

Similaire à Hacking ble smartwatch (20)

hacking_ble_smartwatch @idsecconf2019 cirebon

From Reversing to Exploitation

IRJET- Design and Development Modish Smart Key Box using RFID based on Ard...

From Reversing to Exploitation: Android Application Security in Essence

Mobile Penetration Testing: Episode III - Attack of the Code

APIsecure 2023 - Android Applications and API Hacking, Gabrielle Botbol

Smart Attendance System using Raspberry Pi

A Study on Modern Methods for Detecting Mobile Malware

IRJET-Enhancement of Security using 2-Factor Authentication, 2nd Factor being...

11272019 SafeAssign Originality Reporthttpsucumberlan.docx

ESP32 CAM Face Detection Door Lock

Keyloggers A Malicious Attack

Liferay Italy Symposium 2015 Liferay Mobile SDK and Liferay Screens

draft.ResearchPoster

Introduction to Android Application Security Testing - 2nd Sep 2017

iOS Security: The Never-Ending Story of Malicious Profiles

Fabrizio Cornelli - Securing Android Apps by Reversing - Codemotion Milan 2018

Sbvlc secure barcode based visible light communication for smartphones

apidays New York 2023 - Android Applications and APIs Hacking, Gabrielle Botb...

Attack Vectors in Biometric Recognition Systems

Plus de idsecconf

idsecconf2023 - Mochammad Riyan Firmansyah - Takeover Cloud Managed Router vi...idsecconf

idsecconf2023 - Neil Armstrong - Leveraging IaC for Stealthy Infrastructure A...idsecconf

idsecconf2023 - Mangatas Tondang, Wahyu Nuryanto - Penerapan Model Detection ...idsecconf

idsecconf2023 - Rama Tri Nanda - Hacking Smart Doorbell.pdfidsecconf

idsecconf2023 - Akshantula Neha, Mohammad Febri Ramadlan - Cyber Harmony Auto...idsecconf

idsecconf2023 - Aan Wahyu - Hide n seek with android app protections and beat...idsecconf

idsecconf2023 - Satria Ady Pradana - Launch into the Stratus-phere Adversary ...idsecconf

Ali - The Journey-Hack Electron App Desktop (MacOS).pdfidsecconf

Muh. Fani Akbar - Infiltrate Into Your AWS Cloud Environment Through Public E...idsecconf

Arief Karfianto - Proposed Security Model for Protecting Patients Data in Ele...idsecconf

Nosa Shandy - Clickjacking That Worthy-Google Bug Hunting Story.pdfidsecconf

Baskoro Adi Pratomo - Evaluasi Perlindungan Privasi Pengguna pada Aplikasi-Ap...idsecconf

Utian Ayuba - Profiling The Cloud Crime.pdfidsecconf

Proactive cyber defence through adversary emulation for improving your securi...idsecconf

Perkembangan infrastruktur kunci publik di indonesia - Andika Triwidadaidsecconf

Pentesting react native application for fun and profit - Abdullahidsecconf

Vm escape: case study virtualbox bug hunting and exploitation - Muhammad Alif...idsecconf

Devsecops: membangun kemampuan soc di dalam devsecops pipeline - Dedi Dwiantoidsecconf

Stream crime idsecconf

(Paper) Mips botnet worm with open wrt sdk toolchainsidsecconf

Plus de idsecconf (20)

idsecconf2023 - Mochammad Riyan Firmansyah - Takeover Cloud Managed Router vi...

idsecconf2023 - Neil Armstrong - Leveraging IaC for Stealthy Infrastructure A...

idsecconf2023 - Mangatas Tondang, Wahyu Nuryanto - Penerapan Model Detection ...

idsecconf2023 - Rama Tri Nanda - Hacking Smart Doorbell.pdf

idsecconf2023 - Akshantula Neha, Mohammad Febri Ramadlan - Cyber Harmony Auto...

idsecconf2023 - Aan Wahyu - Hide n seek with android app protections and beat...

idsecconf2023 - Satria Ady Pradana - Launch into the Stratus-phere Adversary ...

Ali - The Journey-Hack Electron App Desktop (MacOS).pdf

Muh. Fani Akbar - Infiltrate Into Your AWS Cloud Environment Through Public E...

Arief Karfianto - Proposed Security Model for Protecting Patients Data in Ele...

Nosa Shandy - Clickjacking That Worthy-Google Bug Hunting Story.pdf

Baskoro Adi Pratomo - Evaluasi Perlindungan Privasi Pengguna pada Aplikasi-Ap...

Utian Ayuba - Profiling The Cloud Crime.pdf

Proactive cyber defence through adversary emulation for improving your securi...

Perkembangan infrastruktur kunci publik di indonesia - Andika Triwidada

Pentesting react native application for fun and profit - Abdullah

Vm escape: case study virtualbox bug hunting and exploitation - Muhammad Alif...

Devsecops: membangun kemampuan soc di dalam devsecops pipeline - Dedi Dwianto

Stream crime

(Paper) Mips botnet worm with open wrt sdk toolchains

Dernier

VIP Kolkata Call Girls Salt Lake 8250192130 Available With Roomgirls4nights

象限策略：Google Workspace 与 Microsoft 365 对业务的影响 .pdfkeithzhangding

VIP Kolkata Call Girl Alambazar 👉 8250192130 Available With Roomdivyansh0kumar0

Call Girls in Uttam Nagar Delhi 💯Call Us 🔝8264348440🔝soniya singh

Denver Web Design brochure for public viewingbigorange77

Russian Call Girls Thane Swara 8617697112 Independent Escort Service ThaneCall girls in Ahmedabad High profile

'Future Evolution of the Internet' delivered by Geoff Huston at Everything Op...APNIC

Git and Github workshop GDSC MLRITMgdsc13

Call Girls In Mumbai Central Mumbai ❤️ 9920874524 👈 Cash on Deliverybabeytanya

Call Girls In South Ex 📱 9999965857 🤩 Delhi 🫦 HOT AND SEXY VVIP 🍎 SERVICECall Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure

Call Girls in East Of Kailash 9711199171 Delhi Enjoy Call Girls With Our Escortsindian call girls near you

A Good Girl's Guide to Murder (A Good Girl's Guide to Murder, #1)Christopher H Felton

Rohini Sector 6 Call Girls Delhi 9999965857 @Sabina Saikh No AdvanceCall Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure

Packaging the Monolith - PHP Tek 2024 (Breaking it down one bite at a time)Dana Luther

定制(UAL学位证)英国伦敦艺术大学毕业证成绩单原版一比一Fs

AlbaniaDreamin24 - How to easily use an API with FlowsThierry TROUIN ☁

VIP 7001035870 Find & Meet Hyderabad Call Girls Dilsukhnagar high-profile Cal...aditipandeya

Call Girls In Saket Delhi 💯Call Us 🔝8264348440🔝soniya singh

VIP Call Girls Kolkata Ananya 🤌 8250192130 🚀 Vip Call Girls Kolkataanamikaraghav4

AWS Community DAY Albertini-Ellan Cloud Security (1).pptxellan12

Dernier (20)

VIP Kolkata Call Girls Salt Lake 8250192130 Available With Room

象限策略：Google Workspace 与 Microsoft 365 对业务的影响 .pdf

VIP Kolkata Call Girl Alambazar 👉 8250192130 Available With Room

Call Girls in Uttam Nagar Delhi 💯Call Us 🔝8264348440🔝

Denver Web Design brochure for public viewing

Russian Call Girls Thane Swara 8617697112 Independent Escort Service Thane

'Future Evolution of the Internet' delivered by Geoff Huston at Everything Op...

Git and Github workshop GDSC MLRITM

Call Girls In Mumbai Central Mumbai ❤️ 9920874524 👈 Cash on Delivery

Call Girls In South Ex 📱 9999965857 🤩 Delhi 🫦 HOT AND SEXY VVIP 🍎 SERVICE

Call Girls in East Of Kailash 9711199171 Delhi Enjoy Call Girls With Our Escorts

A Good Girl's Guide to Murder (A Good Girl's Guide to Murder, #1)

Rohini Sector 6 Call Girls Delhi 9999965857 @Sabina Saikh No Advance

Packaging the Monolith - PHP Tek 2024 (Breaking it down one bite at a time)

定制(UAL学位证)英国伦敦艺术大学毕业证成绩单原版一比一

AlbaniaDreamin24 - How to easily use an API with Flows

VIP 7001035870 Find & Meet Hyderabad Call Girls Dilsukhnagar high-profile Cal...

Call Girls In Saket Delhi 💯Call Us 🔝8264348440🔝

VIP Call Girls Kolkata Ananya 🤌 8250192130 🚀 Vip Call Girls Kolkata

AWS Community DAY Albertini-Ellan Cloud Security (1).pptx

Hacking ble smartwatch

1. Hacking BLE SmartWatch IDSECCONF 2019, Cirebon SMRX86

2. #whoami   Independent security researcher.   My job is doing trick to impress client.   Speaker Idsecconf 2013, 2014, 2015, etc.

3. Relevant Research   Leo Soares. “Mi Band 2, Part 1: Authentication.”, Internet: https:// leojrfs.github.io/writing/miband2-part1-auth/, Nov. 25, 2017.   David Lodge, “Reverse Engineering BLE from Android apps with Frida”, Internet: https://www.pentestpartners.com/security-blog/reverse-engineering- ble-from-android-apps-with-frida/, Feb 23, 2018.

4. BASIC BLE IDSECCONF 2019, Cirebon SMRX86

5. BLE Communication Layer

6. Characteristic & Handle

7. Characteristic & Handle

8. Characteristic & Handle

9. Trial & Error/Success IDSECCONF 2019, Cirebon SMRX86

10. GATTACKER (active sniffing)

11. (Unseccessfull) GATTACKER

12. Android_hcidump (/data/misc/bluetooth/logs/btsnoop_hci.log)

13. Android_hcidump

14. (Active Sniffing) FRIDA (mifit ver 3.3.2)

15. (Active Sniffing) FRIDA (mifit ver 3.3.2)