Demystifying IoT/OT Hacks With SDR
summary
Demonstrates low-cost RF tooling that captures and replays real device signals: HackRF replay of car lock/unlock recorded with an RTL-SDR and inspected in GQRX, showing a replay can toggle locks when no rolling code or proper auth exists. Quantifies risk with projected ~31 billion connected devices and a ~600% expansion in attack surface, catalogs attacks (sniffing, jamming, evil‑twin, replay) and limits (cannot forge protected messages or bypass strong crypto), and notes FCC/NTIA regulatory constraints on transmission.
AI-written summary · about
chapters (13)
- 0:00Intro
- 3:57Evolving loT/OT landscape
- 6:26Internet of things threat model
- 7:53Inside the radio wave spectrum?
- 9:08Why Focus on RF Security?
- 11:19Hardwares and Softwares
- 11:49Initial Profiling of our device
- 13:52Phases of RF Attacks
- 16:55Replay Attack
- 20:19Signal Hunting
- 23:09Types of RF Attacks
- 26:04Internet of Radio Vulnerabilities
- 27:51Privacy, Rules, and Regulations
related talks
51mRadio Hacking: Cars, Hardware, and more!
59mWireless security testing with attack
45m Hacking satellites with Software Defined Radio (SDR)
49mLet's See What's Out There - Mapping the Wireless IOT
30mBuilding hacking tools in JavaScript
41mGrand Theft House: RF Lock Pick Tool to Unlock Smart Door Lock
44mBreaking the Security of Physical Devices
44m"Attacking industrial remote controllers for fun and profit"