hacking_ble_smartwatch @idsecconf2019 cirebon

•

0 likes•164 views

Rama Nanda

read more: https://github.com/smrx86/bip_auth

Internet

Hacking
BLE SmartWatch
IDSECCONF 2019, Cirebon
SMRX86

Agenda
  Basic BLE
Relevan Research
Amazfit BIP Authentification
  Exploitation

#whoami
  Independent security researcher.
  My job is doing trick to impress client.
  Speaker Idsecconf 2013, 2014, 2015, etc.

Relevan Research
  Leo Soares. “Mi Band 2, Part 1: Authentication.”, Internet: https://
leojrfs.github.io/writing/miband2-part1-auth/, Nov. 25, 2017.
  David Lodge, “Reverse Engineering BLE from Android apps with Frida”,
Internet: https://www.pentestpartners.com/security-blog/reverse-engineering-
ble-from-android-apps-with-frida/, Feb 23, 2018.

BASIC BLE
IDSECCONF 2019, Cirebon
SMRX86

Trial & Error/Succes
IDSECCONF 2019, Cirebon
SMRX86

(Active Sniffing) FRIDA
WHERE IS
CHAR UUID
& HANDLE

Mapping
Authentification
IDSECCONF 2019, Cirebon
SMRX86

POC script is adjustment of recent
@leojrs (0x08 > 0x00)

What's hot

Automated Security Analysis of Android & iOS Applications with Mobile Securit...Ajin Abraham

Creating secure apps using the salesforce mobile sdkMartin Vigo

Top OSS for Mobile AppSec Testing: The Latest on R2 and FRIDANowSecure

Cyber Kill Chain: Web Application ExploitationPrathan Phongthiproek

Hacking Cracking 2008Jim Geovedi

Applying API Security at ScaleNordic APIs

Attacking android insecurityGodfrey Nolan

G4H Webcast: Automated Security Analysis of Mobile Applications with Mobile S...Ajin Abraham

INA Volume 1/3 Version 1.0 RC / Digital Identity and AuthenticationSylvain Maret

INA Volume 1/3 Version 1.02 Released / Digital Identity and AuthenticationSylvain Maret

PSCR 2019 - ICAM StandardsAdam Lewis

Nullcon Goa 2016 - Automated Mobile Application Security Testing with Mobile ...Ajin Abraham

Elixir and Lambda talk with a Telegram bot - Paolo Montrasio - Codemotion Mil...Codemotion

AppSec EU 2016: Automated Mobile Application Security Assessment with MobSFAjin Abraham

Owasp Top 10 (M-10 : Lack of Binary Protection) | Null Meet5h1vang

Jump-Start The MASVSPrathan Phongthiproek

Mobile Application Pentest [Fast-Track]Prathan Phongthiproek

Introduction to Android Application Security Testing - 2nd Sep 2017Satheesh Kumar V

Internship brochureFixNix Inc.,

Abusing Google Apps and Data API: Google is My Command and Control CenterAjin Abraham

What's hot (20)

Automated Security Analysis of Android & iOS Applications with Mobile Securit...

Creating secure apps using the salesforce mobile sdk

Top OSS for Mobile AppSec Testing: The Latest on R2 and FRIDA

Cyber Kill Chain: Web Application Exploitation

Hacking Cracking 2008

Applying API Security at Scale

Attacking android insecurity

G4H Webcast: Automated Security Analysis of Mobile Applications with Mobile S...

INA Volume 1/3 Version 1.0 RC / Digital Identity and Authentication

INA Volume 1/3 Version 1.02 Released / Digital Identity and Authentication

PSCR 2019 - ICAM Standards

Nullcon Goa 2016 - Automated Mobile Application Security Testing with Mobile ...

Elixir and Lambda talk with a Telegram bot - Paolo Montrasio - Codemotion Mil...

AppSec EU 2016: Automated Mobile Application Security Assessment with MobSF

Owasp Top 10 (M-10 : Lack of Binary Protection) | Null Meet

Jump-Start The MASVS

Mobile Application Pentest [Fast-Track]

Introduction to Android Application Security Testing - 2nd Sep 2017

Internship brochure

Abusing Google Apps and Data API: Google is My Command and Control Center

Similar to hacking_ble_smartwatch @idsecconf2019 cirebon

Hacking ble smartwatch idsecconf

From Reversing to ExploitationSatria Ady Pradana

Mobile Penetration Testing: Episode III - Attack of the CodeNowSecure

APIsecure 2023 - Android Applications and API Hacking, Gabrielle Botbolapidays

VyAPI - A Modern Cloud Based Vulnerable Android App (Presented at c0c0n XII)Riddhi Shree

apidays New York 2023 - Android Applications and APIs Hacking, Gabrielle Botb...apidays

CYBER SECURITY WORKSHOP (Only For Educational Purpose)Chanaka Lasantha

Smart Attendance System using Raspberry Piijtsrd

Fabrizio Cornelli - Securing Android Apps by Reversing - Codemotion Milan 2018Codemotion

Overcoming the old ways of working with DevSecOps - Culture, Data, Graph, and...Erkang Zheng

API SECURITY by krishna murari and vikas mauryaKrishna Murari

OWASP Mobile Security: Top 10 Risks for 2017TecsyntSolutions

HITCON Defense Summit 2019 －從 SAST 談持續式資安測試Secview

idsecconf2023 - Aan Wahyu - Hide n seek with android app protections and beat...idsecconf

Elastic user group London nov 2019Andrey Bezverkhiy

Making APIs Secure Demands Tracing and Machine Learning to Rapidly Limit Dama...Dana Gardner

IRJET-Enhancement of Security using 2-Factor Authentication, 2nd Factor being...IRJET Journal

Keyloggers A Malicious Attackijtsrd

Blue team reboot - HackFest Haydn Johnson

IRJET- Obfuscation: Maze of CodeIRJET Journal

Similar to hacking_ble_smartwatch @idsecconf2019 cirebon (20)

Hacking ble smartwatch

From Reversing to Exploitation

Mobile Penetration Testing: Episode III - Attack of the Code

APIsecure 2023 - Android Applications and API Hacking, Gabrielle Botbol

VyAPI - A Modern Cloud Based Vulnerable Android App (Presented at c0c0n XII)

apidays New York 2023 - Android Applications and APIs Hacking, Gabrielle Botb...

CYBER SECURITY WORKSHOP (Only For Educational Purpose)

Smart Attendance System using Raspberry Pi

Fabrizio Cornelli - Securing Android Apps by Reversing - Codemotion Milan 2018

Overcoming the old ways of working with DevSecOps - Culture, Data, Graph, and...

API SECURITY by krishna murari and vikas maurya

OWASP Mobile Security: Top 10 Risks for 2017

HITCON Defense Summit 2019 －從 SAST 談持續式資安測試

idsecconf2023 - Aan Wahyu - Hide n seek with android app protections and beat...

Elastic user group London nov 2019

Making APIs Secure Demands Tracing and Machine Learning to Rapidly Limit Dama...

IRJET-Enhancement of Security using 2-Factor Authentication, 2nd Factor being...

Keyloggers A Malicious Attack

Blue team reboot - HackFest

IRJET- Obfuscation: Maze of Code

Recently uploaded

Networking in the Penumbra presented by Geoff Huston at NZNOGAPNIC

Call Girls In Mumbai Central Mumbai ❤️ 9920874524 👈 Cash on Deliverybabeytanya

VIP Kolkata Call Girl Dum Dum 👉 8250192130 Available With Roomdivyansh0kumar0

'Future Evolution of the Internet' delivered by Geoff Huston at Everything Op...APNIC

GDG Cloud Southlake 32: Kyle Hettinger: Demystifying the Dark WebJames Anderson

Rohini Sector 6 Call Girls Delhi 9999965857 @Sabina Saikh No AdvanceCall Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure

Russian Call Girls in Kolkata Samaira 🤌 8250192130 🚀 Vip Call Girls Kolkataanamikaraghav4

FULL ENJOY Call Girls In Mayur Vihar Delhi Contact Us 8377087607dollysharma2066

Dwarka Sector 26 Call Girls | Delhi | 9999965857 🫦 Vanshika Verma More Our Se...Call Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure

Challengers I Told Ya ShirtChallengers I Told Ya Shirtrahman018755

Model Call Girl in Jamuna Vihar Delhi reach out to us at 🔝9953056974🔝9953056974 Low Rate Call Girls In Saket, Delhi NCR

Hot Service (+9316020077 ) Goa Call Girls Real Photos and Genuine Servicesexy call girls service in goa

AlbaniaDreamin24 - How to easily use an API with FlowsThierry TROUIN ☁

Call Girls In South Ex 📱 9999965857 🤩 Delhi 🫦 HOT AND SEXY VVIP 🍎 SERVICECall Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure

VIP Call Girls Pune Madhuri 8617697112 Independent Escort Service PuneCall girls in Ahmedabad High profile

VIP Kolkata Call Girl Alambazar 👉 8250192130 Available With Roomdivyansh0kumar0

On Starlink, presented by Geoff Huston at NZNOG 2024APNIC

Gram Darshan PPT cyber rural in villages of indiaimessage0108

How is AI changing journalism? (v. April 2024)Damian Radcliffe

Delhi Call Girls Rohini 9711199171 ☎✔👌✔ Whatsapp Hard And Sexy Vip Callshivangimorya083

Recently uploaded (20)

Networking in the Penumbra presented by Geoff Huston at NZNOG

Call Girls In Mumbai Central Mumbai ❤️ 9920874524 👈 Cash on Delivery

VIP Kolkata Call Girl Dum Dum 👉 8250192130 Available With Room

'Future Evolution of the Internet' delivered by Geoff Huston at Everything Op...

GDG Cloud Southlake 32: Kyle Hettinger: Demystifying the Dark Web

Rohini Sector 6 Call Girls Delhi 9999965857 @Sabina Saikh No Advance

Russian Call Girls in Kolkata Samaira 🤌 8250192130 🚀 Vip Call Girls Kolkata

FULL ENJOY Call Girls In Mayur Vihar Delhi Contact Us 8377087607

Dwarka Sector 26 Call Girls | Delhi | 9999965857 🫦 Vanshika Verma More Our Se...

Challengers I Told Ya ShirtChallengers I Told Ya Shirt

Model Call Girl in Jamuna Vihar Delhi reach out to us at 🔝9953056974🔝

Hot Service (+9316020077 ) Goa Call Girls Real Photos and Genuine Service

AlbaniaDreamin24 - How to easily use an API with Flows

Call Girls In South Ex 📱 9999965857 🤩 Delhi 🫦 HOT AND SEXY VVIP 🍎 SERVICE

VIP Call Girls Pune Madhuri 8617697112 Independent Escort Service Pune

VIP Kolkata Call Girl Alambazar 👉 8250192130 Available With Room

On Starlink, presented by Geoff Huston at NZNOG 2024

Gram Darshan PPT cyber rural in villages of india

How is AI changing journalism? (v. April 2024)

Delhi Call Girls Rohini 9711199171 ☎✔👌✔ Whatsapp Hard And Sexy Vip Call

hacking_ble_smartwatch @idsecconf2019 cirebon

1. Hacking BLE SmartWatch IDSECCONF 2019, Cirebon SMRX86

2. Agenda   Basic BLE Relevan Research Amazfit BIP Authentification   Exploitation

3. #whoami   Independent security researcher.   My job is doing trick to impress client.   Speaker Idsecconf 2013, 2014, 2015, etc.

4. Relevan Research   Leo Soares. “Mi Band 2, Part 1: Authentication.”, Internet: https:// leojrfs.github.io/writing/miband2-part1-auth/, Nov. 25, 2017.   David Lodge, “Reverse Engineering BLE from Android apps with Frida”, Internet: https://www.pentestpartners.com/security-blog/reverse-engineering- ble-from-android-apps-with-frida/, Feb 23, 2018.

5. BASIC BLE IDSECCONF 2019, Cirebon SMRX86

6. BLE Communication Layer

7. Characteristic & Handle

8. Characteristic & Handle

9. Trial & Error/Succes IDSECCONF 2019, Cirebon SMRX86

10. GATTACKER (active sniffing)

11. (Unseccesful) GATTACKER

12. Android_hcidump

13. Android_hcidump

14. (Active Sniffing) FRIDA

15. (Active Sniffing) FRIDA

16. (Active Sniffing) FRIDA