Bringing Software Defined Radio to the Penetration Testing Community
summary
A usable toolkit called scapy-radio integrates GNU Radio flowgraphs with scapy to let pen testers capture and inject real RF packets; it works with USRP, RTL‑SDR and bladeRF and includes layers for Z‑Wave, 802.15.4 (6LoWPAN/Zigbee) and BLE advertising. Tested attacks include Z‑Wave automation control (demo video shows a successful inject), firmware SPI dumps via GoodFET, and BLE advertising sniffing; limits: single SDR bandwidth (USRP ~56 MHz, bladeRF ~38 MHz), can't follow BLE connections with one dongle, and timing/graph startup delays. Code and flowgraphs are released on the project repo.
AI-written summary · about
chapters (8)
- 0:00Start
- 0:53Smart Meters
- 20:56The Bluetooth Low Energy Electronic Cigarette
- 22:20Privacy Issues
- 25:00Roadmap of the Development
- 28:05Demonstration
- 33:44Details about Automaton
- 34:08Waiting State
related talks
59mWireless security testing with attack
01h 02mHacking the Wireless World with Software Defined Radio - 2.0
01h 00mHacking the Wireless World with Software Defined Radio - 2.0
44m"Attacking industrial remote controllers for fun and profit"
45m Hacking satellites with Software Defined Radio (SDR)
51mRadio Hacking: Cars, Hardware, and more!
45mRaspberry Pi SDR
31mConquer the Enterprise from Inside