Intro to Hardware Hacking
and Internet of Things
By Mohsin khan
Mohsin khan
RESEARCHER
HARDWARE HACKER
PENETRATION TESTER
ETHICAL HACKING AND CTF TRAINER
Researcher @RATTLEMINDS
Speaker @nullhyd
MUHSIN.GAP@GMAIL.COM
▶ Started in my Lab by Fixing Windows and Touching some Hardware.
▶ Later Got Bored from the Loop(First Step Towards Open Source).
▶ Inspired by Defcon (That’s my first Eureka Moment).
▶ Playing God Access in Terminal (Broke my windows few thousand times).
▶ Journey in Hacking was Pure Curiosity to explore and try making changes in I/O’s.
▶ Created Hardware Platform for Penetration Test in Real Scenarios.
▶ Interested in Red Teaming and Custom Attacks.
▶ Researcher and Pentester at “RATTLE MIND”.
▶ Security Researcher, Hardware Hacker and CTF Trainer At Rattlemind.
About me
Thanks for the Support
▶ Global Justice World (Int Org)
▶ Nefamz LLC (Washington Dc)
▶ GeekNight
Agenda
▶ What is Hardware Hacking ?
▶ Getting Started with Hardware.
▶ Track to Hardware Hacking and Iot.
▶ Arduino , Node Mcu and How to start with it ?
▶ What is Iot ? Hands on Iot ?
▶ Create a project with Arduino.
▶ Fun with Node Mcu Ex : Control Led with Phone.
▶ Questions
Topics Covered
▶ Getting Started Hardware Hacking.
▶ What is Arduino and How to get Started.
▶ Led Blink Project and Adding Sensors.
▶ Internet of Things.
▶ Esp8266 and Node MCU.
▶ Home Automation .
▶ Hid Attacks and Defence.
▶ Conclusion
The Hard Way
The Hard Way
is
The Hard Way
The Hardware
isn't
What is Hardware Hacking ?
For More : https://www.sparkfun.com/news/1314
Track to Hardware Hacking
Getting hands Dirty
Start from Fun Projects ?
Arduino , Teensy or Rasberry Pie
Links to get Started :
https://samy.pl/
https://hackaday.com
https://www.arduino.cc
https://www.hackster.io/arduino/projects
http://www.tech-tweaks.com/methods-hardware-
hacking/
Arduino Teensy Rasberry Pie
Arduino Pro
Micro
Teensy Rasberry Pie
Learning Curve Beginner
Friendly
Not For Beginners More Advance
Hid Yes Yes Yes
Integrated
Development
Environment
Arduino Ide Teensyduino Scartch,Idle,
Anything with
Linux support
Documentation Great Not Great Good
Operating System None None Linux Distribution
Community
Support
Great Good Good
Rasberry Pie
Teensy
Arduino for Being Friendly
Getting Started
Track to Hardware Hacking.
What is Arduino?
▶ Arduino is an open-source electronics platform.
▶ Easy-to-use Hardware and software
▶ To do so you use the Arduino programming language.
Why Arduino?
▶ The Arduino software is easy-to-use for beginners, yet flexible enough for advanced users
▶ Inexpensive cost less than Rs.3500.
▶ Cross-platform
▶ Simple, clear programming environment (The language can be expanded through C++ libraries).
▶ Open source and extensible software (circuit designers can make their own version of the module).
How do I use Arduino?
▶ https://www.arduino.cc/en/Guide/HomePage
▶ https://www.hackster.io/arduino/projects
Project Demo
Project Demo
Adding Bluetooth
Pir Sensor Alarm
Shrink your Project
Hands On IOT
(internet of things)
Internet Of Things (iot)
Track to Hardware Hacking.
Esp8266
Arduino Bluetooth
Control LED’s
Node Mcu
Computer Security
Stuxnet was USB Attack
What is Hid Attack or Bad USB?
Features:
▶ Contains Malicious Files.
▶ USB Hid Payload (Acts Like
Keyboard).
▶ Detection (not so far).
▶ Faster than any Human
Hand.
▶ Could take advantage of
Driver which is vulnerable to
zero day.
▶ Persistent.
Custom Hardware Attacks
Defence
Hardware Hacking Workshop
Facebook.com/rattlemindofficial | @rattleminds |muhsin.gap@gmail.com
Questions ?
More :
Facebook.com/rattlemindofficial | @rattleminds | muhsin.gap@gmail.com

Hardware hacking and internet of things

  • 1.
    Intro to HardwareHacking and Internet of Things By Mohsin khan
  • 2.
    Mohsin khan RESEARCHER HARDWARE HACKER PENETRATIONTESTER ETHICAL HACKING AND CTF TRAINER Researcher @RATTLEMINDS Speaker @nullhyd MUHSIN.GAP@GMAIL.COM
  • 3.
    ▶ Started inmy Lab by Fixing Windows and Touching some Hardware. ▶ Later Got Bored from the Loop(First Step Towards Open Source). ▶ Inspired by Defcon (That’s my first Eureka Moment). ▶ Playing God Access in Terminal (Broke my windows few thousand times). ▶ Journey in Hacking was Pure Curiosity to explore and try making changes in I/O’s. ▶ Created Hardware Platform for Penetration Test in Real Scenarios. ▶ Interested in Red Teaming and Custom Attacks. ▶ Researcher and Pentester at “RATTLE MIND”. ▶ Security Researcher, Hardware Hacker and CTF Trainer At Rattlemind. About me
  • 4.
    Thanks for theSupport ▶ Global Justice World (Int Org) ▶ Nefamz LLC (Washington Dc) ▶ GeekNight
  • 5.
    Agenda ▶ What isHardware Hacking ? ▶ Getting Started with Hardware. ▶ Track to Hardware Hacking and Iot. ▶ Arduino , Node Mcu and How to start with it ? ▶ What is Iot ? Hands on Iot ? ▶ Create a project with Arduino. ▶ Fun with Node Mcu Ex : Control Led with Phone. ▶ Questions
  • 6.
    Topics Covered ▶ GettingStarted Hardware Hacking. ▶ What is Arduino and How to get Started. ▶ Led Blink Project and Adding Sensors. ▶ Internet of Things. ▶ Esp8266 and Node MCU. ▶ Home Automation . ▶ Hid Attacks and Defence. ▶ Conclusion
  • 7.
  • 8.
  • 9.
    The Hard Way TheHardware isn't
  • 10.
    What is HardwareHacking ? For More : https://www.sparkfun.com/news/1314
  • 11.
  • 12.
    Getting hands Dirty Startfrom Fun Projects ? Arduino , Teensy or Rasberry Pie Links to get Started : https://samy.pl/ https://hackaday.com https://www.arduino.cc https://www.hackster.io/arduino/projects http://www.tech-tweaks.com/methods-hardware- hacking/
  • 13.
  • 14.
    Arduino Pro Micro Teensy RasberryPie Learning Curve Beginner Friendly Not For Beginners More Advance Hid Yes Yes Yes Integrated Development Environment Arduino Ide Teensyduino Scartch,Idle, Anything with Linux support Documentation Great Not Great Good Operating System None None Linux Distribution Community Support Great Good Good
  • 15.
  • 16.
  • 17.
  • 18.
    Getting Started Track toHardware Hacking.
  • 19.
    What is Arduino? ▶Arduino is an open-source electronics platform. ▶ Easy-to-use Hardware and software ▶ To do so you use the Arduino programming language. Why Arduino? ▶ The Arduino software is easy-to-use for beginners, yet flexible enough for advanced users ▶ Inexpensive cost less than Rs.3500. ▶ Cross-platform ▶ Simple, clear programming environment (The language can be expanded through C++ libraries). ▶ Open source and extensible software (circuit designers can make their own version of the module). How do I use Arduino? ▶ https://www.arduino.cc/en/Guide/HomePage ▶ https://www.hackster.io/arduino/projects
  • 20.
  • 21.
  • 22.
  • 23.
  • 24.
  • 26.
  • 27.
    Internet Of Things(iot) Track to Hardware Hacking.
  • 29.
  • 30.
  • 31.
  • 32.
  • 35.
  • 36.
  • 38.
    What is HidAttack or Bad USB? Features: ▶ Contains Malicious Files. ▶ USB Hid Payload (Acts Like Keyboard). ▶ Detection (not so far). ▶ Faster than any Human Hand. ▶ Could take advantage of Driver which is vulnerable to zero day. ▶ Persistent.
  • 39.
  • 40.
  • 44.
  • 45.
    Questions ? More : Facebook.com/rattlemindofficial| @rattleminds | muhsin.gap@gmail.com

Editor's Notes

  • #2 We think how to break and secure
  • #3 Im glad we are r all here to be part of this great community null hyd , lets start
  • #4 Security thing always teases me think … “What If “ !!!
  • #5 Mr robot for giving challenges
  • #6 We have seen mr robot and modern day attacks with hardware also read teaming is using it … so what is Hid
  • #7 We have seen mr robot and modern day attacks with hardware also read teaming is using it … so what is Hid
  • #8 We Will use pro micro , which family member of Arduino.
  • #9 We Will use pro micro , which family member of Arduino.
  • #10 We Will use pro micro , which family member of Arduino.
  • #11 Hacking Usb circuit for more
  • #12 What are the tools needed
  • #13 Think of these… I started with Arduino, it works for everyone
  • #14 We Will see Arduino ! “ask audience , could this be our Hid “
  • #15 We Will see Arduino ! “ask audience , could this be our Hid “….community Support is based on projects people have published.
  • #16 Rasberry pie for steel mountain hack
  • #17 Teensy USB Development Board. Technically more advance than arduino ,
  • #18 We Will see Arduino !
  • #19 Project in Arduino something looks like this.
  • #20 It is a free platform
  • #21  Blinking LED
  • #22 Make Some Noise
  • #24 we will make this
  • #25 First try bigger , than make it smaller.
  • #26 Think of these… I started with Arduino, it works for everyone
  • #27 Project in Arduino something looks like this.
  • #28 Project in Arduino something looks like this.
  • #30 Project in Arduino something looks like this.
  • #31 Project in Arduino something looks like this.
  • #33 https://www.teachmemicro.com/intro-nodemcu-arduino/
  • #37 Stuxnet is zero day attack…If a worker stuck a USB thumb drive into an infected machine, Stuxnet could, well, worm its way onto it, then spread onto the next machine Risk is Real ?
  • #38 Stuxnet is zero day attack…If a worker stuck a USB thumb drive into an infected machine, Stuxnet could, well, worm its way onto it, then spread onto the next machine Risk is Real ?
  • #39 “Pentesters this is for you” May I know which is tool is your favorite. It is actually hid device
  • #40 By adding modules doing more things
  • #43 usb firewall http://www.zdnet.com/article/how-to-use-linuxs-built-in-usb-attack-protection/
  • #44 usb firewall http://www.zdnet.com/article/how-to-use-linuxs-built-in-usb-attack-protection/
  • #45 Monthly we do workshop , join us at
  • #46 “Pentesters this is for you” May I know which is tool is your favorite.