33. Bluetooth Hacking.pdf

(353 KB) Pobierz
Bluetooth Hacking - Full Disclosure @ 21C3
Hacking Bluetooth enabled mobile
phones and beyond – Full Disclosure
Adam Laurie Marcel Holtmann Martin Herfurt
21C3: The Usual Suspects
21st Chaos Communication Congress
December 27th to 29th, 2004
Berliner Congress Center, Berlin, Germany
Bluetooth Hacking – Full Disclosure @ 21C3
267162879.008.png 267162879.009.png 267162879.010.png
Who we are
● Adam Laurie
– CSO of The Bunker Secure Hosting Ltd.
– Co-Maintainer of Apache-SSL
– DEFCON Staff/Organiser
● Marcel Holtmann
– Maintainer and core developer of the Linux Bluetooth
Stack BlueZ
● Martin Herfurt
– Security Researcher
– Founder of trifinite.org
Bluetooth Hacking – Full Disclosure @ 21C3
267162879.011.png 267162879.001.png
Outline (1)
● Bluetooth Introduction
● History
● Technology Overview
● The BlueSnarf Attack
● The HeloMoto Attack
● The BlueBug Attack
● Bluetooone
● Long-Distance Attacking
Bluetooth Hacking – Full Disclosure @ 21C3
267162879.002.png 267162879.003.png
Outline (2)
● Blooover
● Blueprinting
● DOS Attacks
● Sniffing Bluetooth with hcidump
● Conclusions – Lessons tought
● Feedback / Discussion
Bluetooth Hacking – Full Disclosure @ 21C3
267162879.004.png 267162879.005.png
Bluetooth Introduction (1)
● Wire replacement technology
● Low power
● Short range 10m - 100m
● 2.4 GHz
● 1 Mb/s data rate
Bluetooth Hacking – Full Disclosure @ 21C3
267162879.006.png 267162879.007.png
Zgłoś jeśli naruszono regulamin