Difference between revisions of "ZigBee Sniffing"

From Embedded Lab Vienna for IoT & Security
Jump to navigation Jump to search
 
(5 intermediate revisions by the same user not shown)
Line 1: Line 1:
== Summary ==  
== Summary ==  


In this project the communication between a Raspberry Pi with a Raspbee module and a Philips Hue light bulb was sniffed with the Atmel RZ Raven USB stick. The Transport Key was obtained and therefore the on/off commands sent from the Pi to the bulb could be decrypted.
In this project the communication between a [[Raspberry Pi 3, Model B+, WLAN, BT|Raspberry Pi]] with a [[RaspBee premium, Erweiterungsplatine mit Funkmodul für Raspberry Pi|Raspbee module]] and a [[Philips Hue White and Color Ambiance Single LED-Bulb E27 10W|Philips Hue light bulb]] was sniffed with the [[AVR RZUSBSTICK|Atmel RZ Raven USB stick]]. The Transport Key was obtained and therefore the on/off commands sent from the [[Raspberry Pi 3, Model B+, WLAN, BT|Raspberry Pi]] to the light bulb could be decrypted.


== Requirements ==
== Requirements ==
Line 7: Line 7:
* Operating system of host: Windows 10
* Operating system of host: Windows 10
** Software:
** Software:
*** SD Card Formatter 5.0 for SD/SDHC/SDXC
*** [https://www.sdcard.org/downloads/formatter_4/ SD Card Formatter 5.0 for SD/SDHC/SDXC]
*** Win32 Disk Imager
*** [https://sourceforge.net/projects/win32diskimager/ Win32 Disk Imager]
* Operating system of attacking host: Kali Linux 64 Bit
* Operating system of attacking host: [https://www.kali.org/downloads/12/ Kali Linux 64 Bit]
** Version 2018.2
** Version 2018.2
* Packages: KillerBee
* Packages: [https://github.com/riverloopsec/killerbee KillerBee]
* Operating system of Raspberry Pi: RaspBee Gateway SD card image Raspbian Jessi RaspBee (Stable)
* Operating system of Raspberry Pi: [https://www.dresden-elektronik.de/funktechnik/solutions/wireless-light-control/raspbee-gw-sd-card-image/?L=1 RaspBee Gateway SD card image Raspbian Jessi RaspBee (Stable)]
** Version 01-2017
** Version 01-2017


Line 26: Line 26:
* Sniffed Transport Key
* Sniffed Transport Key
* Decrypted commands
* Decrypted commands
* Detailed [[File:ZigBeeSniffing.pdf]] about the ZigBee protocol and the conducted project
* Detailed [[:File:ZigBeeSniffing.pdf|documentation]] about the [https://en.wikipedia.org/wiki/Zigbee ZigBee protocol] and the conducted project


== Used Hardware ==
== Used Hardware ==


* Raspberry Pi 3 Model B+
* [[Raspberry Pi 3, Model B+, WLAN, BT]]
* SD card with at least 8 gigabyte of memory
* [[Kingston 8GB micro SD-HC class 4]]
* Raspbee module
* [[RaspBee premium, Erweiterungsplatine mit Funkmodul für Raspberry Pi]]
* Philips Hue light bulb
* [[Philips Hue White and Color Ambiance Single LED-Bulb E27 10W]]
* Atmel RZ Raven USB stick
* [[AVR RZUSBSTICK]]
* AVR Dragon programming board
* [https://www.microchip.com/Developmenttools/ProductDetails/ATAVRDRAGON AVR Dragon programming board]
* IDC cable
* IDC cable
* USB 2.0 cable a-male to b-male
* USB 2.0 cable a-male to b-male
* Windows 10 host
* Windows 10 host
* Kali Linux host
* [https://www.kali.org/downloads/12/ Kali Linux] host
* USB stick with at least 4 gigabyte of memory
* USB stick with at least 4 gigabyte of memory
* USB mouse and keyboard
* USB mouse and keyboard

Latest revision as of 13:10, 12 March 2019

Summary

In this project the communication between a Raspberry Pi with a Raspbee module and a Philips Hue light bulb was sniffed with the Atmel RZ Raven USB stick. The Transport Key was obtained and therefore the on/off commands sent from the Raspberry Pi to the light bulb could be decrypted.

Requirements

Authors

  • Daniel Tod
  • Luca Strobl
  • Dominik Mayer
  • Jean Castillo

Results

Used Hardware

See the documentation for detailed information of the used hardware such as images and links.

Courses