Wi-Fi Direct To Hell: Attacking Wi-Fi Direct Protocol Implementations
summary
Wi‑Fi Direct implementations on Android, HP printers and Samsung Smart TVs expose concrete flaws: printers ship as group owners with 12345678 default passphrase, some devices accept WPS push‑button requests without user confirmation allowing "printer phishing," and TVs use MAC‑based whitelists that are trivially cloned. Research builds modified wpa_supplicant workflows, a peer-to-peer find tool (Python) for discovery and a fingerprinting PoC, and demonstrates remote service access, WPS handshake cracking and device crashes; the Wi‑Fi Alliance shows 13,280 devices certified so these issues are widespread.
AI-written summary · about
chapters (10)
- 0:00Start
- 3:40Specification
- 4:23Infrastructure Mode
- 5:25Wi-Fi Direct
- 10:12802.11 Discovery
- 11:06P2P Discovery
- 14:42P2P Service Discovery
- 37:59Samsung Smart TV
- 41:39Android
- 44:17While sitting here (and enjoying the free Wi-Fi)
related talks
27mWIFI-Important Remote Attack Surface: Threat is Expanding
22mWhat really happens when you connect to public Wi-Fi?
52mWi-Fi Hacking for Web Pentesters
59mD1T1 - Real World Attacks Against Secure Elements
40mSweet Dreams: Abusing Sleep Mode to Break Wi-Fi Encryption and Disrupt WPA2/3 Networks
33mWi-Fi Brokering
30mVulnerabilities in the Internet of Things
31mD1T1 - Covert Data Exfiltration Channel