Hacking a Professional Drone
summary
Professional-grade UAV with a $30–35k price tag and 2 km telemetry link is vulnerable: using an off‑the‑shelf XBee chip and a USB serial adapter the attacker switches the radio to API mode, sends a broadcast to harvest device addresses, issues a remote AT command to reroute traffic and then injects commands (e.g. start engines) seen in the Android app. The proof‑of‑concept works at 2 km, requires about $40 of gear, and enables MITM, command injection and DoS.
AI-written summary · about
chapters (9)
- 0:00Introduction and agenda
- 2:23Professional UAV overview
- 4:16System architecture
- 6:10XBee link vulnerability analysis
- 13:35Reverse engineering commands
- 16:07Live demonstration
- 19:50Remediation strategies
- 22:32Impact and lessons learned
- 25:33Q&A session
related talks
26mDrone Penetration Testing and Vulnerability Analysis Framework
40mGrand Theft Drone: Reaching Breaking Point in Drone Proprietary RF Link Security
12mHacking Drone Warfare
09mWIP: Hijacking Attacks on UAV Follow-Me Systems in Realistic Scenarios
43mDrone Attacks on Industrial Wireless: A New Front in Cyber Security
31mHacking Everything – The Dark Side of the Internet of Things
55mAttacking Industrial Remote Controllers
59mWireless security testing with attack