+- Blackhat Carding Forum | Carding Forum - Credit Cards - Hacking Forum - Cracking Forum | Bhcforums.cc (https://bhcforums.cc)
+-- Forum: Hacking and Cracking Zone (https://bhcforums.cc/Forum-Hacking-and-Cracking-Zone)
+--- Forum: Hacking (https://bhcforums.cc/Forum-Hacking)
+---- Forum: Hacking Tools (https://bhcforums.cc/Forum-Hacking-Tools)
+---- Thread: ZigBee Hacking by ZigDiggity (/Thread-ZigBee-Hacking-by-ZigDiggity)
ZigBee Hacking by ZigDiggity - Blackhatking - 02-10-2020
ZigBee Hacking by ZigDiggity
ZigDiggity a ZigBee Hacking Toolkit is a Python-based IoT (Internet of Things) penetration testing framework targeting the ZigBee Smart home protocol
ZigBee continues to grow in popularity as a method for providing simple wireless communication between devices (i.e. low power/traffic, short distance), & can be found in a variety of consumer products that range from smart home automation to healthcare. Security concerns introduced by these systems are just as diverse and plentiful, underscoring a need for quality assessment tools.This ZigBee penetration testing framework enables cybersecurity professionals, auditors, and developers to run complex interactions with ZigBee networks using a single device.The current version of ZigDiggity is solely designed for use with the Raspbee, the RaspBee premium is ZigBee addon for Raspberry Pi with Firmware.
The RaspBee provides:
- Pluggable add on with radio module (IEEE 802.15.4) for Raspberry Pi
- Brings Raspberry Pi as LAN-ZigBee gateway
- Frequency: 2.4 GHz ISM band, can be used worldwide
- Based on Atmel´s single chip microcontroller ATmega256RFR2
- With ZigBee firmware and extensive software package to control up to 200 devices
Introducing ZigDiggity 2.0, a ZigBee penetration testing framework created by Matt Gleason & Francis Brown of Bishop Fox. Special thanks to Caleb Marion! , ZigDiggity version 2 is a major overhaul of the original package and aims to enable cybersecurity professionals, auditors, and developers to run complex interactions with ZigBee networks using a single device.
[To see content please register here]
Download
[To see content please register here]
Installation
Using a default install of Raspbian, perform the following steps:
Plug your Raspbee into your Raspberry Pi
Enable serial using the sudo raspbi-config command
Select "Advanced Options/Serial"
Select NO to "Would you like a login shell to be accessible over serial?"
Select YES to enabling serial
Restart the Raspberry Pi
Install GCFFlasher available Here
Flash the Raspbee's firmware
sudo GCFFlasher -f firmware/zigdiggity_raspbee.bin
sudo GCFFlasher -r
Install the python requirements using pip3 install -r requirements.txt
Patch scapy sudo cp patch/zigbee.py /usr/local/lib/python3.5/dist-packages/scapy/layers/zigbee.py
Install wireshark on the device using sudo apt-get install wireshark
Hardware
Code:
The contents of this section are hidden for your groupRegister or Login
Code:
The contents of this section are hidden for your groupRegister or Login
Code:
The contents of this section are hidden for your groupRegister or Login
Usage
Currently scripts are available in the root of the repository, they can all be run using Python3:
python3 listen.py -c 15
When running with wireshark, root privileges may be required.
Scripts
- ack_attack.py - Performs the acknowledge attack against a given network.
- beacon.py - Sends a single beacon and listens for a short time. Intended for finding which networks are near you.
- find_locks.py - Examines the network traffic on a channel to determine if device behavior looks like a lock. Displays which devices it thinks are locks.
- insecure_rejoin.py - Runs an insecure rejoin attempt on the target network.
- listen.py - Listens on a channel piping all output to wireshark for viewing.
- scan.py - Moves between channels listening and piping the data to wireshark for viewing.
- unlock.py - Attempts to unlock a target lock