Moving from Hacking IoT Gadgets to Breaking into One of Europe's Highest Hotel Suites
summary
Tools and methods include sniffers (Ubertooth, Adafruit Bluefruit), a three‑channel micro:bit setup flashed with Little Jack firmware, Wireshark, mitmproxy and Frida, plus custom Python PoC scripts. The claim is concrete: a hotel BLE mobile‑key system is reverse engineered by extracting a backend “mobile key” blob, reversing its CRC/CSE, deriving the key material and replaying it to a lock. That process opens a real suite (37th floor, premium room) in testing. Also finds hardcoded keys and magnet‑activated motors and broken AES-128 session key usages in consumer locks.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 1:03BLE ecosystem and attacks
- 3:24Analysis techniques
- 5:11Security in BLE
- 6:55Sniffing and interception
- 12:35Bypassing countermeasures
- 16:17Case study: Padlocks
- 20:47Reverse engineering
- 23:29Advanced lock attacks
- 28:32Hotel key vulnerabilities
- 38:03Real-world exploitation
- 43:37Conclusion and Q&A
related talks
44mBreaking the Security of Physical Devices
28mThe IoT Hacker's Toolkit
01h 06mBackdoors in Back Doors
51mBluetooth Hacking: Tools And Techniques
36mOpen Sesame - Or How Secure Is Your Stuff In Electronic Lockers
46mD1T2 - Pwning KNX & ZigBee Networks
37mOpen Sesame! The full story behind opening a smart lock
41mGrand Theft House: RF Lock Pick Tool to Unlock Smart Door Lock