sdr introduction
play

SDR Introduction Maarten Pentinga Roald Nefs Junior-pentester - PowerPoint PPT Presentation

Mar 21, 2024 •123 likes •336 views

SDR Introduction Maarten Pentinga Roald Nefs Junior-pentester & teacher. Big DevOps Engineer at DUO. Big interest in breaking things, creating interest in Site Reliability hacking challenges & organizing CTF Engineering, Python, RF

  1. SDR

  2. Introduction Maarten Pentinga Roald Nefs Junior-pentester & teacher. Big DevOps Engineer at DUO. Big interest in breaking things, creating interest in Site Reliability hacking challenges & organizing CTF Engineering, Python, RF and more... events. GitHub: roaldnefs E-mail: roald@warpnet.nl E-mail: mp@warpnet.nl

  3. Agenda Introduction Exercise: Listen up! Regulations Example: Passive IMSI Catcher Example: Fixed Code Example: Rolling Code Hello Barbie! Exercise: Ring the Doorbell

  4. Exercise: Listen up! 30m Exercise - Work in groups of 4, - Listen very carefully, they might broadcast twice. Goal - Listen at least to one radio station, - Choose whether you would want to receive messages from the P2000 network or monitor air traffic. Extra - Try and receive weather satellite images with your RTL-SDR. (Google required)

  5. Frequency regulations Countries have different regulations. Within the Netherlands , sending signals on common frequencies is illegal . Therefor a permit is required. For equipment with limited reach and low transmitting powe r no permit is needed.

  6. Hmh, please do clarify! Product Model: XD-RF-5V We legal (:

  7. Example: Fixed Code (1/3) Devices using a fixed code are vulnerable to a replay and bruteforce attack. The attacker can simple record and replay the signal. Using a bruteforce approach requires knowledge about the modulation type (FFCID). A ON A OFF A ON

  8. Example: Fixed Code (2/3) Instead of using an SDR to record the Receiver Transmitter Power switch signal you can also use a cheap receiver to listen to the fixed codes. For more popular devices such as ‘ Klik Aan Klik Uit ’ you will even find libraries: kakuarduino

  9. Example: Fixed Code (3/3) REGISTER Most devices will repeat the 1 1 1 1 1 1 fixed code several times. Instead of repeating them, you can 0 0 1 1 simple send each code once. You might want to check of the 0 0 1 1 De Bruijn sequence... 0 0 1 1 0 0 1 1

  10. Example: Passive IMSI Catcher (1/5) The passive International Mobile Subscriber Identity ( IMSI ) catcher works by capturing an IMSI number when a phone initializes a connection to a base station . To protect the privacy of the user all subsequent communication is done with a random Temporary Mobile Subscriber Identity ( TMSI ) number. Active IMSI catchers perform a man in the middle attack and are definitely illegal! Passive Active

  11. Example: Passive IMSI Catcher (2/5) Scan for nearby base stations: Frequency Power

  12. Example: Passive IMSI Catcher (3/5) Using github.com/Oros42/IMSI-catcher to sniff IMSI numbers ( will automatically scan and select a base station ):

  13. Example: Passive IMSI Catcher (4/5) The GSM traffic can be viewed in Wireshark, the !icmp && e212.imsi filter will only show packets that contain IMSI numbers.

  14. Example: Passive IMSI Catcher (5/5) Problems occur when you can associate an IMSI number with an individual. Mobile apps can access a device’s IMSI number, e.g. getSubscriberId on Android…

  15. Example: Rolling Code (1/3) Rolling code is used in keyless entry systems to prevent replay attacks. The car and keyfob use a pseudorandom number generator. BAD PACKET LOST PACKET 1240 1236 1238 1235 1234

  16. Example: Rolling Code (2/3) Jam the vehicle’s frequency and intercept two codes. Stop jamming an Immediately send the first received code so the owner won’t notice anything... JAMMING 2 1 1 2 The second captured code is still usable and can be used as long as the owner doesn’t (un)lock the vehicle.

  17. Example: Rolling Code (3/3) Used hardware: two YARD Stick One’s (Yet Another Radio Dongle), which can transmit and receive digital wireless signals at frequencies below 1 GHz. The YARD Stick One come with RfCat firmware tnstalled. RfCat allows you to control the wireless transceiver from an interactive Python shell. YARD Stick One != SDR

  18. Hello Barbie! (1/3) Let’s take a closer look at Barbie…

  19. Hello Barbie! (2/3) FCC ID: PIYDKF74-15A5W Searchable FCC ID Database: fccid.io

  20. Hello Barbie! (3/3)

  21. Exercise: Ring the Doorbell 60m Exercise - Work in groups of 4, - Finish assignment 1 till 7 from chapter 3. Goal - Ring the doorbell by recording the signal, demodulation in Audacity and writing your own doorbell script.

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION

INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION

TRAINING COURSE ON SOCIAL PROTECTION & FORMALIZATION TRINIDAD AND TOBAGO MARCH 15, 2017 INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION Design of the NIS Assistance from the

547 views • 23 slides
INTRODUCTION Introduction 2/42 INTRODUCTION Alternations I am giving bread to the

INTRODUCTION Introduction 2/42 INTRODUCTION Alternations I am giving bread to the

Patterns of variation in the expression of case and agreement Andrs Brny Leiden University Centre for Linguistics 9 November 2019, BaSIS Workshop a.barany@hum.leidenuniv.nl INTRODUCTION Introduction 2/42 INTRODUCTION

1.37k views • 42 slides
Introduction Introduction Introduction Introduction Outline Motivation Failures

Introduction Introduction Introduction Introduction Outline Motivation Failures

Introduction Introduction Introduction Introduction Outline Motivation Failures Definition and concepts Process and product properties Principles SE Approaches Motivation Software and the economy The economies of

1.03k views • 49 slides
Introduction Introduction Introduction Nationwide Cause for Concern 1

Introduction Introduction Introduction Nationwide Cause for Concern 1

Introduction Introduction Introduction Nationwide Cause for Concern 1 https://www.cdc.gov/std/stats17/infographic.htm Introduction Epidemiology in Western Colorado CPHE Surveillance Data Report, May 2018 Chlamydia Epidemiology in Western

977 views • 39 slides
DAQ introduction Purpose of this talk : (1) Introduction for those who have not been in every

DAQ introduction Purpose of this talk : (1) Introduction for those who have not been in every

DAQ introduction Purpose of this talk : (1) Introduction for those who have not been in every meeting (2) Some ideas of diagrams for section 7.1 (Introduction) of TP. Giles Barr 25 Jan 2018, Pembroke College On DUNE, the reality is there is a

474 views • 10 slides
INTRODUCTION cf. Schneider, Chapter 1 INTRODUCTION THEY ARE OUT TO GET YOU INTRODUCTION WHAT

INTRODUCTION cf. Schneider, Chapter 1 INTRODUCTION THEY ARE OUT TO GET YOU INTRODUCTION WHAT

ADVANCED COMPUTER SECURITY INTRODUCTION cf. Schneider, Chapter 1 INTRODUCTION THEY ARE OUT TO GET YOU INTRODUCTION WHAT IS SECURITY? A systems security policies describe What the system is supposed to do Store and provide access

479 views • 16 slides
Overview Introduction to SMIL Introduction to W3C and XML Introduction to SMIL

Overview Introduction to SMIL Introduction to W3C and XML Introduction to SMIL

Overview Introduction to SMIL Introduction to W3C and XML Introduction to SMIL Writing a SMIL file Adding Media Objects Martin Halvey Clipping media files January 2008 Timing and Synchronising Layout World Wide

387 views • 14 slides
14 Introduction Introduction Bad guys can put malware into Example: hosts

14 Introduction Introduction Bad guys can put malware into Example: hosts

Introduction Introduction source Encapsulation ISO/OSI reference model message M application segment H t H t M transport network datagram H n H n H t M presentation: allow applications to frame link H l H n H t M interpret

583 views • 4 slides
Previous Lecture Introduction to SMIL 2 Introduction to W3C and XML Introduction to SMIL

Previous Lecture Introduction to SMIL 2 Introduction to W3C and XML Introduction to SMIL

Previous Lecture Introduction to SMIL 2 Introduction to W3C and XML Introduction to SMIL Writing a SMIL file Adding Media Objects Martin Halvey Clipping media files January 2008 Timing and Synchronising Layout

322 views • 8 slides
Lecture 1 Andreas Habegger Introduction Zynq Introduction Zynq Introduction Zynq PS vs. PL

Lecture 1 Andreas Habegger Introduction Zynq Introduction Zynq Introduction Zynq PS vs. PL

Introduction Zynq Lecture 1 Andreas Habegger Introduction Zynq Introduction Zynq Introduction Zynq PS vs. PL Processing System Processor Peripherals Data Buses AXI Bus Conclusion BTE5380 - Embedded Systems Octobre 2014 Andreas Habegger

1.81k views • 30 slides
2018.06 01 SMILE5 Introduction S E 5 02 Alpha Cloud M I L 03 Company Introduction 04

2018.06 01 SMILE5 Introduction S E 5 02 Alpha Cloud M I L 03 Company Introduction 04

2018.06 01 SMILE5 Introduction S E 5 02 Alpha Cloud M I L 03 Company Introduction 04 Project References S E 5 PART.1 SMILE5 Introduction M I L Introduction STORION-SMILE5 Residential Energy Storage System Inverter 5kW Output Input

1.06k views • 25 slides
Introduction to CICS Course introduction Course introduction What is CICS? What is an

Introduction to CICS Course introduction Course introduction What is CICS? What is an

Introduction to CICS Course introduction Course introduction What is CICS? What is an application server? Why use an application server? Course introduction Services provided by CICS How CICS applications are defined Scaling CICS to meet

1.84k views • 146 slides
Network Visualization Introduction Presented by Shahed Introduction Introduction Basic

Network Visualization Introduction Presented by Shahed Introduction Introduction Basic

Network Visualization Introduction Presented by Shahed Introduction Introduction Basic building blocks Node Links (relationship between nodes) Spatial information Network data

584 views • 9 slides
Introduction Introduction (1) Main argument of the paper: universities are not only

Introduction Introduction (1) Main argument of the paper: universities are not only

Le jugement des pairs comme outil de management des universits Peer-review as a management tool Christine Musselin (CSO, Sciences Po et CNRS) Avril 2013, Lirrsistible ascension du capitalisme acadmique Introduction Introduction (1)

590 views • 28 slides
Introduction Introduction to storage and to storage and filesystems filesystems Introduction

Introduction Introduction to storage and to storage and filesystems filesystems Introduction

Moreno Baricevic Gilberto Daz Axel Kohlmeyer Stefano Cozzini ULA ICTP CNR-IOM DEMOCRITOS Merida, VENEZUELA Trieste, ITALY Trieste, ITALY Introduction Introduction to storage and to storage and filesystems filesystems Introduction

1.19k views • 51 slides
JABLOTRON JA-100 introduction November 2011 Introduction Todays goals First introduction of

JABLOTRON JA-100 introduction November 2011 Introduction Todays goals First introduction of

JABLOTRON JA-100 introduction November 2011 Introduction Todays goals First introduction of the brand new JA-100 alarm system Visions Basic architecture System components Setting Help us with final validations You are the FIRST ones

1.69k views • 111 slides
Nutrition and Hydration Ng Ee Ling Belinda Leow NYSI Sport Nutritionists What we will cover

Nutrition and Hydration Ng Ee Ling Belinda Leow NYSI Sport Nutritionists What we will cover

11/25/2016 Download NYSI app for an activity later Sports Science Workshop: Nutrition and Hydration Ng Ee Ling Belinda Leow NYSI Sport Nutritionists What we will cover today Lets talk about Dietary strategies for

606 views • 13 slides
THE SCOPE OF THE PROBLEM Athlete Deaths Phidippides 530 BC 490 BC 3000 sudden deaths

THE SCOPE OF THE PROBLEM Athlete Deaths Phidippides 530 BC 490 BC 3000 sudden deaths

Headlines you DONT want to see Theodore P. Abraham, MD, FACC Meyer Friedman Distinguished Professor of Medicine UCSF HCM Center of Excellence University of California at San Francisco 6/18/2018 Disclosures: none THE SCOPE OF THE PROBLEM

378 views • 13 slides
Bounded Cohomology Mladen Bestvina Definition of H n b ( X ) Let X be a topological space. We have

Bounded Cohomology Mladen Bestvina Definition of H n b ( X ) Let X be a topological space. We have

Bounded Cohomology Mladen Bestvina Definition of H n b ( X ) Let X be a topological space. We have singular (co)chain complexes: 0 C 0 ( X ) C 1 ( X ) and 0 C 0 ( X ) C 1 ( X ) (with coefficients R ).

823 views • 67 slides
COMP30019 Graphics and Interaction Perspective Geometry Adrian Pearce Department of Computing

COMP30019 Graphics and Interaction Perspective Geometry Adrian Pearce Department of Computing

Introduction to perspective geometry Perspective Geometry Virtual camera Centre of projection Human perspective COMP30019 Graphics and Interaction Perspective Geometry Adrian Pearce Department of Computing and Information Systems University

662 views • 29 slides
Contents Course arrangements Who, what, why measure? Introduction lecture Active

Contents Course arrangements Who, what, why measure? Introduction lecture Active

HELSINKI UNIVERSITY OF TECHNOLOGY HELSINKI UNIVERSITY OF TECHNOLOGY Mika Ilvesmki, D.Sc. (Tech.) Contents Course arrangements Who, what, why measure? Introduction lecture Active & Passive measurements Single-point &

365 views • 7 slides
Slide 1 Using Deliberative Methods to Engage the Public: Facilitating a Deliberative Session Agency

Slide 1 Using Deliberative Methods to Engage the Public: Facilitating a Deliberative Session Agency

Slide 1 Using Deliberative Methods to Engage the Public: Facilitating a Deliberative Session Agency for Healthcare Research and Quality Community Forum June 13 Slide 2 Purpose and Objectives Purpose: o Provide practical guidance on facilitating

249 views • 5 slides
CS 4518 Mobile and Ubiquitous Computing Smartphone Sensing Emmanuel Agu Smartphone Sensors

CS 4518 Mobile and Ubiquitous Computing Smartphone Sensing Emmanuel Agu Smartphone Sensors

CS 4518 Mobile and Ubiquitous Computing Smartphone Sensing Emmanuel Agu Smartphone Sensors Typical smartphone sensors today accelerometer, compass, GPS, microphone, camera, proximity Future sensors? Heart rate monitor,

825 views • 20 slides
Analysis and Control of Multi-Robot Systems Elements of Port-Hamiltonian Modeling Dr. Paolo

Analysis and Control of Multi-Robot Systems Elements of Port-Hamiltonian Modeling Dr. Paolo

Elective in Robotics 2014/2015 Analysis and Control of Multi-Robot Systems Elements of Port-Hamiltonian Modeling Dr. Paolo Robuffo Giordano CNRS, Irisa/Inria ! Rennes, France Introduction to Port-Hamiltonian Systems Port-Hamiltonian

1.19k views • 40 slides

More recommend