Difference between revisions of "ZigBee Sniffing"

From Embedded Lab Vienna for IoT & Security
Jump to navigation Jump to search
Line 1: Line 1:
== Summary ==  
== Summary ==  


In this project the communication between a Raspberry Pi with a Raspbee module and a Philips Hue light bulb was sniffed with the Atmel RZ Raven USB stick. The Transport Key was obtained and therefore the on/off commands sent from the Pi to the bulb could be decrypted.
In this project the communication between a [https://de.wikipedia.org/wiki/Raspberry_Pi Raspberry Pi] with a [https://www.dresden-elektronik.de/raspbee/ Raspbee module] and a [https://www2.meethue.com/de-at/p/hue-white-einzellampe--e27/8718696449578 Philips Hue light bulb] was sniffed with the [https://www.microchip.com/developmenttools/ProductDetails/ATAVRRZUSBSTICK Atmel RZ Raven USB stick]. The Transport Key was obtained and therefore the on/off commands sent from the [https://de.wikipedia.org/wiki/Raspberry_Pi Raspberry Pi] to the light bulb could be decrypted.


== Requirements ==
== Requirements ==
Line 7: Line 7:
* Operating system of host: Windows 10
* Operating system of host: Windows 10
** Software:
** Software:
*** SD Card Formatter 5.0 for SD/SDHC/SDXC
*** [https://www.sdcard.org/downloads/formatter_4/ SD Card Formatter 5.0 for SD/SDHC/SDXC]
*** Win32 Disk Imager
*** [https://sourceforge.net/projects/win32diskimager/ Win32 Disk Imager]
* Operating system of attacking host: Kali Linux 64 Bit
* Operating system of attacking host: [https://www.kali.org/downloads/12/ Kali Linux 64 Bit]
** Version 2018.2
** Version 2018.2
* Packages: KillerBee
* Packages: [https://github.com/riverloopsec/killerbee KillerBee]
* Operating system of Raspberry Pi: RaspBee Gateway SD card image Raspbian Jessi RaspBee (Stable)
* Operating system of Raspberry Pi: [https://www.dresden-elektronik.de/funktechnik/solutions/wireless-light-control/raspbee-gw-sd-card-image/?L=1 RaspBee Gateway SD card image Raspbian Jessi RaspBee (Stable)]
** Version 01-2017
** Version 01-2017


Line 26: Line 26:
* Sniffed Transport Key
* Sniffed Transport Key
* Decrypted commands
* Decrypted commands
* Detailed [[:File:ZigBeeSniffing.pdf|documentation]] about the ZigBee protocol and the conducted project
* Detailed [[:File:ZigBeeSniffing.pdf|documentation]] about the [https://de.wikipedia.org/wiki/ZigBee ZigBee protocol] and the conducted project


== Used Hardware ==
== Used Hardware ==
Line 32: Line 32:
* [https://www.raspberrypi.org/products/raspberry-pi-3-model-b-plus/ Raspberry Pi 3 Model B+]
* [https://www.raspberrypi.org/products/raspberry-pi-3-model-b-plus/ Raspberry Pi 3 Model B+]
* SD card with at least 8 gigabyte of memory
* SD card with at least 8 gigabyte of memory
* Raspbee module
* [https://www.dresden-elektronik.de/raspbee/ Raspbee module]
* Philips Hue light bulb
* [https://www2.meethue.com/de-at/p/hue-white-einzellampe--e27/8718696449578 Philips Hue light bulb]
* Atmel RZ Raven USB stick
* [https://www.microchip.com/developmenttools/ProductDetails/ATAVRRZUSBSTICK Atmel RZ Raven USB stick]
* AVR Dragon programming board
* [https://www.microchip.com/Developmenttools/ProductDetails/ATAVRDRAGON AVR Dragon programming board]
* IDC cable
* IDC cable
* USB 2.0 cable a-male to b-male
* USB 2.0 cable a-male to b-male

Revision as of 09:09, 7 March 2019

Summary

In this project the communication between a Raspberry Pi with a Raspbee module and a Philips Hue light bulb was sniffed with the Atmel RZ Raven USB stick. The Transport Key was obtained and therefore the on/off commands sent from the Raspberry Pi to the light bulb could be decrypted.

Requirements

Authors

  • Daniel Tod
  • Luca Strobl
  • Dominik Mayer
  • Jean Castillo

Results

Used Hardware

See the documentation for detailed information of the used hardware such as images and links.

Courses