DEF CON 24 Hacking Conference - Defcon Media Server

Download PDF
3 downloads 191 Views 7MB Size Report
Comment
whoami. * Anthony Rose. * Ben Ramsey. Page 3. >>> Overview. 1. Goals. 2. What is Bluetooth Low Energy? 3. Why S
=== r?QKB Mi?QMv _Qb2 @ _2b2`+?2`J2`+mHBi2 a2+m`Biv @ "a BM 1H2+i`B+H 1M;BM22`BM; @ GQ+FTB+FBM; ?Q##vBbi @ S`BQ` rQ`F, qB`2H2bb pB/2Q i`77B+ MHvbBb @ *m``2MiHv 7Q+mb2/ QM "G1 b2+m`Biv

"2M _Kb2v @ _2b2`+? .B`2+iQ`J2`+mHBi2 a2+m`Biv @ S?. BM *QKTmi2` a+B2M+2 @ qB`2H2bb ;22F @ _2+2Mi rQ`F, w@qp2 ii+Fb @.2`#v*QM kyR8 @a?KQQ*QM kyRe @SQ*%%:h6P ytRk

(kf9k)

=== Pp2`pB2r RX :QHb kX q?i Bb "Hm2iQQi? GQr 1M2`;v\ jX q?v a?QmH/ A *`2\ 9X 1tTHQBib 8X hF2rvb  6mim`2 qQ`F eX .2KQb dX Zm2biBQMb

(jf9k)

=== :QHb A/2MiB7v pmHM2`#BHBiB2b BM "G1 bK`i HQ+Fb _2H2b2 T`QQ7 Q7 +QM+2Ti 2tTHQBib Smi T`2bbm`2 QM p2M/Q`b iQ BKT`Qp2 b2+m`Biv _Bb2 +QMbmK2` r`2M2bb

(9f9k)

=== q?i Bb "Hm2iQQi? GQr 1M2`;v\ :hh U:2M2`B+ ii`B#mi2 S`Q7BH2V @ *HB2Mi b2M/b `2[m2bib iQ :hh b2`p2` @ a2`p2` biQ`2b ii`B#mi2b

(ef9k)

=== q?v a?QmH/ A *`2\ qB/2Hv mb2/ M/ ;BMBM; TQTmH`Biv a2+m`BM; ?QK2b M/ pHm#H2b *m``2Mi "G1 ]b2+m`Biv] T`Q/m+ib, @ .2/#QHib @ "BF2 HQ+Fb @ GQ+F2`b @ :mM *b2b @ a72b @ hJb @ B`#M#

(df9k)

=== "Hm2iQQi? >+FBM; Bb 77Q`/#H2 l#2`iQQi? "Hm2iQQi? _bT#2``v >B;? ;BM

PM2 @ 0Ryy aK`i la" /QM;H2 @ 0R8 SB @ 09y /B`2+iBQMH Mi2MM @ 08y

(Nf9k)

=== l#2`iQQi? PM2 *`2i2/ #v JB+?2H PbbKMM PT2M bQm`+2 "Hm2iQQi? iQQH 6B`bi 77Q`/#H2 "Hm2iQQi? KQMBiQ`BM; M/ /2p2HQTK2Mi THi7Q`K S`QKBb+mQmb bMB77BM; _2+2Bp2 QMHv +T#BHBiv UrBi? +m``2Mi 7B`Kr`2V

(Ryf9k)

=== q`/`BpBM; l#2`iQQi? Y ?B;? ;BM /B`2+iBQMH Mi2MM "Hm2iQQi? /QM;H2 1bv /2THQvK2Mi GQM; `M;2 URf9Y KBH2V *QM+2H#H2 q`7HvBM; rBi? /`QM2bXXX

(RRf9k)

=== lM+`+F2/ GQ+Fb LQF2 S/HQ+F Jbi2`HQ+F S/HQ+F m;mbi .QQ`HQ+F ErBFb2i E2pQ .QQ`HQ+F

(Rjf9k)

=== lM+`+F2/ GQ+Fb LQF2 S/HQ+F Jbi2`HQ+F S/HQ+F m;mbi .QQ`HQ+F @ ?`/@+Q/2/ F2v ErBFb2i E2pQ .QQ`HQ+F .Bb+Qp2`2/ #v SmH G`BpB2`2  ai2T?2M >HH

(Rjf9k)

=== lM+`+F2/ GQ+Fb LQF2 S/HQ+F Jbi2`HQ+F S/HQ+F m;mbi .QQ`HQ+F ErBFb2i E2pQ .QQ`HQ+F @ 7`;BH2

(Rjf9k)

=== 62im`2b Q7 ]lM+`+F#H2] GQ+Fb S`QT2` 1a 1M+`vTiBQM h`mHv `M/QK MQM+2 @ 3@Re #vi2b k@bi2T mi?2MiB+iBQM LQ ?`/@+Q/2/ TbbrQ`/b GQM; TbbrQ`/b HHQr2/ @ Re@ky +?`+i2`b

(R9f9k)

=== *QMM2+iBQM aMB77BM; l#2`iQQi? mb2/ 7Q` bMB77BM; Jmbi #2 HBbi2MBM; QM M /p2`iBb2K2Mi +?MM2H Ujdj3- jNV M/ 7QHHQr  +QMM2+iBQM @ lb2 j l#2`iQQi?b Ul#2`i22i?\V- R QM 2+? /p2`iBb2K2Mi +?MM2H SbbBp2Hv HBbi2M iQ +QMp2`biBQM #2ir22M i?2 TT M/ GQ+F

.2pB+2

lb2`

(Rdf9k)

=== /KBM S`BpBH2;2b *M +?M;2 /KBM TbbrQ`/

(kyf9k)

=== /KBM S`BpBH2;2b *M +?M;2 /KBM TbbrQ`/ @ yRRkj98ed3eeeeeeee

(kyf9k)

=== /KBM S`BpBH2;2b *M +?M;2 /KBM TbbrQ`/ @ yRRkj98ed3eeeeeeee GQ+Fb Qmi QrM2` rBi? M2r TbbrQ`/

(kyf9k)

=== /KBM S`BpBH2;2b *M +?M;2 /KBM TbbrQ`/ @ yRRkj98ed3eeeeeeee GQ+Fb Qmi QrM2` rBi? M2r TbbrQ`/ _2[mB`2b ?`/ `2b2i U#ii2`v `2KQpHV

(kyf9k)

=== /KBM S`BpBH2;2b *M +?M;2 /KBM TbbrQ`/ @ yRRkj98ed3eeeeeeee GQ+Fb Qmi QrM2` rBi? M2r TbbrQ`/ _2[mB`2b ?`/ `2b2i U#ii2`v `2KQpHV @ PMHv TQbbB#H2 B7 HQ+F Bb H`2/v QT2M

(kyf9k)

=== /KBM S`BpBH2;2b *M +?M;2 /KBM TbbrQ`/ @ yRRkj98ed3eeeeeeee GQ+Fb Qmi QrM2` rBi? M2r TbbrQ`/ _2[mB`2b ?`/ `2b2i U#ii2`v `2KQpHV @ PMHv TQbbB#H2 B7 HQ+F Bb H`2/v QT2M

(kyf9k)

=== "`mi2 6Q`+BM; q?2M HH 2Hb2 7BHb- i?`Qr 2p2`vi?BM; i Bi ZmB+FHQ+F @ 3 /B;Bi TBM @ Ryy-yyy-yyy +QK#Qb B"HmGQ+F @ e +?`+i2` TbbrQ`/ @  GPh5 aQHmiBQM @ *QKKQM TBMb URRRRRRRRRkj98ed3- eNeNeNeN- XXXV @ S?QM2 MmK#2`b @ ai`22i //`2bb @ qQ`/HBbib (kkf9k)

=== 6mxxBM; .2pB+2b *?M;2 #vi2b Q7  pHB/ +QKKM/ a22 B7 r2 +M ;2i HQ+F iQ 2Mi2` ]2``Q` bii2] omHM2`#H2 .2pB+2 @ PFB/QF2v aK`i .QQ`HQ+F

(k9f9k)

=== .2+QKTBHBM; SEb omHM2`#H2 .2pB+2 @ .MHQ+F .QQ`HQ+F _2p2Hb 2M+`vTiBQM K2i?Q/ M/ ?`/ +Q/2/ TbbrQ`/ @ ]i?BbBbi?2b2+`2i]

(kdf9k)

=== q2# SA liBHBx2b  q2# a2`p2` iQ ;2M2`i2 TbbrQ`/b _2[mB`2b BMi2`M2i iQ +QKKmMB+i2 M/ `2i`B2p2 TbbrQ`/b "2+QKBM; KQ`2 rB/2Hv mb2/ @ ErBFb2i E2pQ .QQ`HQ+F @ LQF2 aK`i S/HQ+F @ Jbi2`HQ+F aK`i S/HQ+F @ m;mbi aK`i .QQ`HQ+F @ J2b? JQiBQM "BiHQ+F S/HQ+F

q2# a2`p2`

GQ+F

lb2` (k3f9k)

=== _Q;m2 .2pB+2b aTQQ7 HQ+F iQ bi2H TbbrQ`/ 7`QK mb2` _2[mB`2b, @ _bT#2``v SB Q` GTiQT @ "Hm2x @ "H2MQ @ GB;?i"Hm2 JQ#BH2 M/ lM/2i2+i#H2 UaQK2r?iV omHM2`#H2 .2pB+2 @ J2b? JQiBQM "BiHQ+F S/HQ+F TT Bb `mMMBM; BM i?2 #+F;`QmM/ M/ b2M/b +QKKM/b rBi?Qmi mb2` BMi2`+iBQM h?Bb Bb TQbbB#H2 /m2 iQ  T`2/B+i#H2 MQM+2

(kNf9k)

=== _Q;m2 .2pB+2b .2THQvK2Mi BM ?B;? i`77B+ `2b U*Q7722 a?QT Q` lMBp2`bBiB2bV h?2Q`2iB+HHv TQbbB#H2 iQ `2i`B2p2 TbbrQ`/ 7`QK mb2` M/ bi2H #BF2 #27Q`2 i?2v `2im`M

(jRf9k)

=== h2bi _mM lMBp2`bBiv BM JB/r2bi 9 #BF2b QM +KTmb UamKK2`iBK2V *T+Biv 33 #BF2b hrQ@?Qm` bi`QHH XXX

(jkf9k)

=== h2bi _mM

(jjf9k)

=== h2bi _mM

(j9f9k)

=== h2bi _mM .Bb+HBK2`, q2 /B/ MQi QT2M Mv HQ+Fb i?i /Q MQi #2HQM; iQ mb XXX

(jef9k)

=== _Q;m2 .2pB+2 qv ?2/ q2# a2`p2`

GQ+F

lb2`

_Q;m2 .2pB+2 k

qB6B- Gh1- 1i+

_Q;m2 .2pB+2 R (jdf9k)

=== >Qr /Q r2 7BM/ i?2b2 /2pB+2b\ -40 Model P = 2.0 Mean RSS Collected RSS

-50

RSS (dBm)

-60

-70

-80

-90

-100

0

5

10

15

20

25

30

35

Distance (m)

(jNf9k)

=== hF2rvb  6mim`2 qQ`F hF2rvb @ Pp2`HH- i?2 p2M/Q`b T`BQ`BiBx2/ T?vbB+H `Q#mbiM2bb `i?2` i?M rB`2H2bb b2+m`Biv @ Pmi Q7 Re HQ+Fb 2tKBM2/- Rk ?p2 BMbm77B+B2Mi "G1 b2+m`Biv @ *QMbmK2`b b?QmH/ /Bb#H2 "Hm2iQQi? QM T?QM2 r?2M MQi BM mb2 6mim`2 qQ`F @ 1ti`+i Tii2`M Q7 HB72 mbBM; ?BbiQ`v HQ;b @ .vMKB+ T`Q7BH2b 7Q` `Q;m2 /2pB+2 @ 1ti2M/2/ Tvi?QM 7mM+iBQMHBiv @ 1pHmi2 "Hm2iQQi? hJ HQ+Fb

(9yf9k)

=== .2KQb

qB`2H2bb .2KQb

(9Rf9k)