SlideShare a Scribd company logo
1 of 46
Download to read offline
$atellite Hacking for Fun & 
           Pr0fit!

          Adam Laurie
       adam@algroup.co.uk

         http://rfidiot.org

                  
Who Am I?
    ●   Open Source developer / researcher
        –   Bluetooth
        –   RFID
        –   Full Disclosure / White Hat!
    ●   Freelance research / training / lecturing




                                      
Why Now?
    ●   Jim Geovedi & Raditya Iryandi
        –   Hacking a Bird in The Sky

    ●   Old Skewl
        –   Started doing this in late 90's.
        –   So, err... why did it take so long to publish?




                                      
Feed Hunting
    ●   Look for 'interesting' satellite feeds
        –   Scan all satellites
        –   Scan all frequencies
        –   Report on mailing lists / forums




                                    
Poking in the dark




             
Poking in the dark




             
Poking in the dark




             
Poking in the dark




             
There must be a better way!
    ●   Visualisation is your friend
        –   Human Brain likes images
             ●   Recognise food
             ●   Recognise danger
             ●   Recognise friends
             ●   Recognise enemies




                                      
Visual Representations




               
Visual Representations




               
Visual Representations




               
Time travel – day 1




              
Time travel – day 2




              
That was then...
    ●   Proprietary control systems
        –   Undocumented
             ●   Reluctant manufacturers
        –   Special hardware / interface converters
             ●   Motor Control
             ●   Signal Status
                  –   to RS232
        –   Expensive receivers


                                        
This is now...
    ●   Open standards
        –   DVB Cards
        –   Embedded Linux Receivers
             ●   Dreambox
                  –   Tuxbox based
                  –   GPL source code
                  –   Cross compilers
                  –   Alternative firmware
                       ●   http://www.i­have­a­dreambox.com

        –   http://www.dream­multimedia­tv.de/
                                               
This is now...
    ●   Web Interface
        –   Select programming
        –   Steer dish
        –   Examine feed properties




                                  
Web Interface




           
Stream Info




          
Stream Info




          
You've got to know how to grab it...




                      
Stream Info
    ●   dvbsnoop ­ DVB and MPEG stream analyzer
        –   “WireShark for DVB”
        –   Access to raw data from DVB card
        –   Decode known PIDs

             http://dvbsnoop.sourceforge.net




                                   
Stream Info




          
Stream Info




          
Stream Info




          
Stream Info




          
Stream Info




          
Stream Info




          
Stream Info




          
Stream Info




          
Stream Info




          
Taking over the Dreambox
    ●   Avoid programming
        –   Analyse config files
        –   Tools to tweak and update
        –   Use existing Web Interface URLS
        –   Use remote tools via IP
             ●   ssh / scp
             ●   dvbsnoop
             ●   tun/tap


                                    
Taking over the Dreambox




                
Taking over the Dreambox




                
dreaMMap
    ●   python (yay!) script
        –   Grab URL
        –   Read status from returned webpage
        –   Create 3D model




                                  
This is now...




           
This is now...




           
3D model capabilities
    ●   Point & Click
        –   Steer to sat/freq
        –   Decode DVB/Audio within model
        –   Read Text / EPG
        –   Pipe datagrams to Wireshark




                                  
Demonstration




           
     
     
     
     
     
Equipment List
    ●   Dreambox 7020
        –   £250 ($350)
    ●   Dish
        –   £50 ­ £200
    ●   Motor & Mount
        –   £100
    ●   Total = £550 ($785)

                                
Questions?



      http://rfidiot.org

    adam@algroup.co.uk




               

More Related Content

Similar to Satellite Hacking Visualization and Control Using Open Source Tools

Playing in a Satellite environment
Playing in a Satellite environmentPlaying in a Satellite environment
Playing in a Satellite environmentChristian Martorella
 
Device inspection to remote root
Device inspection to remote rootDevice inspection to remote root
Device inspection to remote rootTim N
 
BlackHat 2009 - Hacking Zigbee Chips (slides)
BlackHat 2009 - Hacking Zigbee Chips (slides)BlackHat 2009 - Hacking Zigbee Chips (slides)
BlackHat 2009 - Hacking Zigbee Chips (slides)Michael Smith
 
Birds of a Feather 2017: 邀請分享 IoT, SDR, and Car Security - Aaron
Birds of a Feather 2017: 邀請分享 IoT, SDR, and Car Security - AaronBirds of a Feather 2017: 邀請分享 IoT, SDR, and Car Security - Aaron
Birds of a Feather 2017: 邀請分享 IoT, SDR, and Car Security - AaronHITCON GIRLS
 
Infrared simulation and processing on Nvidia platforms
Infrared simulation and processing on Nvidia platformsInfrared simulation and processing on Nvidia platforms
Infrared simulation and processing on Nvidia platformsYoss Cohen
 
Android Development...The 20,000-Foot View
Android Development...The 20,000-Foot ViewAndroid Development...The 20,000-Foot View
Android Development...The 20,000-Foot ViewCommonsWare
 
Mototrbo
MototrboMototrbo
MototrboTim N
 
Cacheconcurrencyconsistency cassandra svcc
Cacheconcurrencyconsistency cassandra svccCacheconcurrencyconsistency cassandra svcc
Cacheconcurrencyconsistency cassandra svccsrisatish ambati
 
[ENG] IPv6 shipworm + My little Windows domain pwnie
[ENG] IPv6 shipworm + My little Windows domain pwnie[ENG] IPv6 shipworm + My little Windows domain pwnie
[ENG] IPv6 shipworm + My little Windows domain pwnieZoltan Balazs
 
Raspberry pi Beginners Session
Raspberry pi Beginners SessionRaspberry pi Beginners Session
Raspberry pi Beginners SessionAnant Shrivastava
 
Repositories as Code
Repositories as CodeRepositories as Code
Repositories as CodeKris Buytaert
 
Concise Courses Raspberry Pi
Concise Courses Raspberry PiConcise Courses Raspberry Pi
Concise Courses Raspberry Pidjp55
 
Hacking and Forensics on the Go - 44CON 2012
Hacking and Forensics on the Go - 44CON 2012Hacking and Forensics on the Go - 44CON 2012
Hacking and Forensics on the Go - 44CON 201244CON
 
OpenThink Labs Workshop : CCNA BootCamp
OpenThink Labs Workshop : CCNA BootCampOpenThink Labs Workshop : CCNA BootCamp
OpenThink Labs Workshop : CCNA BootCampWildan Maulana
 
Quest for a low powered home hub 120522
Quest for a low powered home hub 120522Quest for a low powered home hub 120522
Quest for a low powered home hub 120522Paul Tanner
 
Lofar python meetup jan9 2013
Lofar python meetup jan9 2013Lofar python meetup jan9 2013
Lofar python meetup jan9 2013Gijs Molenaar
 

Similar to Satellite Hacking Visualization and Control Using Open Source Tools (20)

Playing in a Satellite environment
Playing in a Satellite environmentPlaying in a Satellite environment
Playing in a Satellite environment
 
Device inspection to remote root
Device inspection to remote rootDevice inspection to remote root
Device inspection to remote root
 
BlackHat 2009 - Hacking Zigbee Chips (slides)
BlackHat 2009 - Hacking Zigbee Chips (slides)BlackHat 2009 - Hacking Zigbee Chips (slides)
BlackHat 2009 - Hacking Zigbee Chips (slides)
 
Birds of a Feather 2017: 邀請分享 IoT, SDR, and Car Security - Aaron
Birds of a Feather 2017: 邀請分享 IoT, SDR, and Car Security - AaronBirds of a Feather 2017: 邀請分享 IoT, SDR, and Car Security - Aaron
Birds of a Feather 2017: 邀請分享 IoT, SDR, and Car Security - Aaron
 
Infrared simulation and processing on Nvidia platforms
Infrared simulation and processing on Nvidia platformsInfrared simulation and processing on Nvidia platforms
Infrared simulation and processing on Nvidia platforms
 
Security Onion
Security OnionSecurity Onion
Security Onion
 
Android Development...The 20,000-Foot View
Android Development...The 20,000-Foot ViewAndroid Development...The 20,000-Foot View
Android Development...The 20,000-Foot View
 
amrapali builders @@hacking cctv.pdf
amrapali builders @@hacking cctv.pdfamrapali builders @@hacking cctv.pdf
amrapali builders @@hacking cctv.pdf
 
Mototrbo
MototrboMototrbo
Mototrbo
 
Cacheconcurrencyconsistency cassandra svcc
Cacheconcurrencyconsistency cassandra svccCacheconcurrencyconsistency cassandra svcc
Cacheconcurrencyconsistency cassandra svcc
 
Duan
DuanDuan
Duan
 
[ENG] IPv6 shipworm + My little Windows domain pwnie
[ENG] IPv6 shipworm + My little Windows domain pwnie[ENG] IPv6 shipworm + My little Windows domain pwnie
[ENG] IPv6 shipworm + My little Windows domain pwnie
 
Raspberry pi Beginners Session
Raspberry pi Beginners SessionRaspberry pi Beginners Session
Raspberry pi Beginners Session
 
Repositories as Code
Repositories as CodeRepositories as Code
Repositories as Code
 
Concise Courses Raspberry Pi
Concise Courses Raspberry PiConcise Courses Raspberry Pi
Concise Courses Raspberry Pi
 
Polstra 44con2012
Polstra 44con2012Polstra 44con2012
Polstra 44con2012
 
Hacking and Forensics on the Go - 44CON 2012
Hacking and Forensics on the Go - 44CON 2012Hacking and Forensics on the Go - 44CON 2012
Hacking and Forensics on the Go - 44CON 2012
 
OpenThink Labs Workshop : CCNA BootCamp
OpenThink Labs Workshop : CCNA BootCampOpenThink Labs Workshop : CCNA BootCamp
OpenThink Labs Workshop : CCNA BootCamp
 
Quest for a low powered home hub 120522
Quest for a low powered home hub 120522Quest for a low powered home hub 120522
Quest for a low powered home hub 120522
 
Lofar python meetup jan9 2013
Lofar python meetup jan9 2013Lofar python meetup jan9 2013
Lofar python meetup jan9 2013
 

Satellite Hacking Visualization and Control Using Open Source Tools