hacking_ble_smartwatch @idsecconf2019 cirebon

•

0 recomendaciones•164 vistas

Rama Nanda

read more: https://github.com/smrx86/bip_auth

Internet

Hacking
BLE SmartWatch
IDSECCONF 2019, Cirebon
SMRX86

Agenda
  Basic BLE
Relevan Research
Amazfit BIP Authentification
  Exploitation

#whoami
  Independent security researcher.
  My job is doing trick to impress client.
  Speaker Idsecconf 2013, 2014, 2015, etc.

Relevan Research
  Leo Soares. “Mi Band 2, Part 1: Authentication.”, Internet: https://
leojrfs.github.io/writing/miband2-part1-auth/, Nov. 25, 2017.
  David Lodge, “Reverse Engineering BLE from Android apps with Frida”,
Internet: https://www.pentestpartners.com/security-blog/reverse-engineering-
ble-from-android-apps-with-frida/, Feb 23, 2018.

BASIC BLE
IDSECCONF 2019, Cirebon
SMRX86

Trial & Error/Succes
IDSECCONF 2019, Cirebon
SMRX86

(Active Sniffing) FRIDA
WHERE IS
CHAR UUID
& HANDLE

Mapping
Authentification
IDSECCONF 2019, Cirebon
SMRX86

POC script is adjustment of recent
@leojrs (0x08 > 0x00)

Más contenido relacionado

La actualidad más candente

Automated Security Analysis of Android & iOS Applications with Mobile Securit...Ajin Abraham

Creating secure apps using the salesforce mobile sdkMartin Vigo

Top OSS for Mobile AppSec Testing: The Latest on R2 and FRIDANowSecure

Cyber Kill Chain: Web Application ExploitationPrathan Phongthiproek

Hacking Cracking 2008Jim Geovedi

Applying API Security at ScaleNordic APIs

Attacking android insecurityGodfrey Nolan

G4H Webcast: Automated Security Analysis of Mobile Applications with Mobile S...Ajin Abraham

INA Volume 1/3 Version 1.0 RC / Digital Identity and AuthenticationSylvain Maret

INA Volume 1/3 Version 1.02 Released / Digital Identity and AuthenticationSylvain Maret

PSCR 2019 - ICAM StandardsAdam Lewis

Nullcon Goa 2016 - Automated Mobile Application Security Testing with Mobile ...Ajin Abraham

Elixir and Lambda talk with a Telegram bot - Paolo Montrasio - Codemotion Mil...Codemotion

AppSec EU 2016: Automated Mobile Application Security Assessment with MobSFAjin Abraham

Owasp Top 10 (M-10 : Lack of Binary Protection) | Null Meet5h1vang

Jump-Start The MASVSPrathan Phongthiproek

Mobile Application Pentest [Fast-Track]Prathan Phongthiproek

Introduction to Android Application Security Testing - 2nd Sep 2017Satheesh Kumar V

Internship brochureFixNix Inc.,

Abusing Google Apps and Data API: Google is My Command and Control CenterAjin Abraham

La actualidad más candente (20)

Automated Security Analysis of Android & iOS Applications with Mobile Securit...

Creating secure apps using the salesforce mobile sdk

Top OSS for Mobile AppSec Testing: The Latest on R2 and FRIDA

Cyber Kill Chain: Web Application Exploitation

Hacking Cracking 2008

Applying API Security at Scale

Attacking android insecurity

G4H Webcast: Automated Security Analysis of Mobile Applications with Mobile S...

INA Volume 1/3 Version 1.0 RC / Digital Identity and Authentication

INA Volume 1/3 Version 1.02 Released / Digital Identity and Authentication

PSCR 2019 - ICAM Standards

Nullcon Goa 2016 - Automated Mobile Application Security Testing with Mobile ...

Elixir and Lambda talk with a Telegram bot - Paolo Montrasio - Codemotion Mil...

AppSec EU 2016: Automated Mobile Application Security Assessment with MobSF

Owasp Top 10 (M-10 : Lack of Binary Protection) | Null Meet

Jump-Start The MASVS

Mobile Application Pentest [Fast-Track]

Introduction to Android Application Security Testing - 2nd Sep 2017

Internship brochure

Abusing Google Apps and Data API: Google is My Command and Control Center

Similar a hacking_ble_smartwatch @idsecconf2019 cirebon

Hacking ble smartwatch idsecconf

From Reversing to ExploitationSatria Ady Pradana

Mobile Penetration Testing: Episode III - Attack of the CodeNowSecure

APIsecure 2023 - Android Applications and API Hacking, Gabrielle Botbolapidays

VyAPI - A Modern Cloud Based Vulnerable Android App (Presented at c0c0n XII)Riddhi Shree

apidays New York 2023 - Android Applications and APIs Hacking, Gabrielle Botb...apidays

CYBER SECURITY WORKSHOP (Only For Educational Purpose)Chanaka Lasantha

Smart Attendance System using Raspberry Piijtsrd

Fabrizio Cornelli - Securing Android Apps by Reversing - Codemotion Milan 2018Codemotion

Overcoming the old ways of working with DevSecOps - Culture, Data, Graph, and...Erkang Zheng

API SECURITY by krishna murari and vikas mauryaKrishna Murari

OWASP Mobile Security: Top 10 Risks for 2017TecsyntSolutions

HITCON Defense Summit 2019 －從 SAST 談持續式資安測試Secview

idsecconf2023 - Aan Wahyu - Hide n seek with android app protections and beat...idsecconf

Elastic user group London nov 2019Andrey Bezverkhiy

Making APIs Secure Demands Tracing and Machine Learning to Rapidly Limit Dama...Dana Gardner

IRJET-Enhancement of Security using 2-Factor Authentication, 2nd Factor being...IRJET Journal

Keyloggers A Malicious Attackijtsrd

Blue team reboot - HackFest Haydn Johnson

IRJET- Obfuscation: Maze of CodeIRJET Journal

Similar a hacking_ble_smartwatch @idsecconf2019 cirebon (20)

Hacking ble smartwatch

From Reversing to Exploitation

Mobile Penetration Testing: Episode III - Attack of the Code

APIsecure 2023 - Android Applications and API Hacking, Gabrielle Botbol

VyAPI - A Modern Cloud Based Vulnerable Android App (Presented at c0c0n XII)

apidays New York 2023 - Android Applications and APIs Hacking, Gabrielle Botb...

CYBER SECURITY WORKSHOP (Only For Educational Purpose)

Smart Attendance System using Raspberry Pi

Fabrizio Cornelli - Securing Android Apps by Reversing - Codemotion Milan 2018

Overcoming the old ways of working with DevSecOps - Culture, Data, Graph, and...

API SECURITY by krishna murari and vikas maurya

OWASP Mobile Security: Top 10 Risks for 2017

HITCON Defense Summit 2019 －從 SAST 談持續式資安測試

idsecconf2023 - Aan Wahyu - Hide n seek with android app protections and beat...

Elastic user group London nov 2019

Making APIs Secure Demands Tracing and Machine Learning to Rapidly Limit Dama...

IRJET-Enhancement of Security using 2-Factor Authentication, 2nd Factor being...

Keyloggers A Malicious Attack

Blue team reboot - HackFest

IRJET- Obfuscation: Maze of Code

Último

𓀤Call On 7877925207 𓀤 Ahmedguda Call Girls Hot Model With Sexy Bhabi Ready Fo...Neha Pandey

Call Girls Service Chandigarh Lucky ❤️ 7710465962 Independent Call Girls In C...Sheetaleventcompany

VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting High Prof...singhpriety023

DDoS In Oceania and the Pacific, presented by Dave Phelan at NZNOG 2024APNIC

Call Girls In Ashram Chowk Delhi 💯Call Us 🔝8264348440🔝soniya singh

Best VIP Call Girls Noida Sector 75 Call Me: 8448380779Delhi Call girls

INDIVIDUAL ASSIGNMENT #3 CBG, PRESENTATION.CarlotaBedoya1

Call Girls In Defence Colony Delhi 💯Call Us 🔝8264348440🔝soniya singh

Russian Call Girls in %(+971524965298 )# Call Girls in DubaiDubai call girls 971524965298 Call girls in Bur Dubai

Nanded City ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready ...tanu pandey

Rohini Sector 6 Call Girls Delhi 9999965857 @Sabina Saikh No AdvanceCall Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure

Moving Beyond Twitter/X and Facebook - Social Media for local news providersDamian Radcliffe

WhatsApp 📞 8448380779 ✅Call Girls In Mamura Sector 66 ( Noida)Delhi Call girls

Call Girls Ludhiana Just Call 98765-12871 Top Class Call Girl Service AvailableSeo

Hot Service (+9316020077 ) Goa Call Girls Real Photos and Genuine Servicesexy call girls service in goa

Low Rate Young Call Girls in Sector 63 Mamura Noida ✔️☆9289244007✔️☆ Female E...SofiyaSharma5

Networking in the Penumbra presented by Geoff Huston at NZNOGAPNIC

(INDIRA) Call Girl Pune Call Now 8250077686 Pune Escorts 24x7Call Girls in Nagpur High Profile Call Girls

Russian Call girl in Ajman +971563133746 Ajman Call girl Servicegwenoracqe6

Rohini Sector 26 Call Girls Delhi 9999965857 @Sabina Saikh No AdvanceCall Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure

hacking_ble_smartwatch @idsecconf2019 cirebon

1. Hacking BLE SmartWatch IDSECCONF 2019, Cirebon SMRX86

2. Agenda   Basic BLE Relevan Research Amazfit BIP Authentification   Exploitation

3. #whoami   Independent security researcher.   My job is doing trick to impress client.   Speaker Idsecconf 2013, 2014, 2015, etc.

4. Relevan Research   Leo Soares. “Mi Band 2, Part 1: Authentication.”, Internet: https:// leojrfs.github.io/writing/miband2-part1-auth/, Nov. 25, 2017.   David Lodge, “Reverse Engineering BLE from Android apps with Frida”, Internet: https://www.pentestpartners.com/security-blog/reverse-engineering- ble-from-android-apps-with-frida/, Feb 23, 2018.

5. BASIC BLE IDSECCONF 2019, Cirebon SMRX86

6. BLE Communication Layer

7. Characteristic & Handle

8. Characteristic & Handle

9. Trial & Error/Succes IDSECCONF 2019, Cirebon SMRX86

10. GATTACKER (active sniffing)

11. (Unseccesful) GATTACKER

12. Android_hcidump

13. Android_hcidump

14. (Active Sniffing) FRIDA

15. (Active Sniffing) FRIDA

16. (Active Sniffing) FRIDA