1 00:00:00,000 --> 00:00:06,340 Next talk will be on the Arm-Mounted Weaponized Platform, an anime viewer by Corbin Villa. 2 00:00:06,600 --> 00:00:16,720 My name is Corbin Villa, and I can see all the Bluetooth devices in the area, whether they're in discoverable mode or not. 3 00:00:18,800 --> 00:00:23,820 So this is my Arm-Mounted Bluetooth Wi-Fi sniffer. 4 00:00:24,720 --> 00:00:28,040 I've been working on it for a few weeks now. 5 00:00:28,040 --> 00:00:35,100 And you can come up after the presentation, talk to me, you can check it out in person. 6 00:00:35,360 --> 00:00:42,200 But I'll be showing how I did it, how you can start a project like this, and the code of how it works. 7 00:00:42,440 --> 00:00:52,160 So to begin, just to fill you in, this screen is VNC'd into the Raspberry Pi. 8 00:00:52,360 --> 00:00:55,480 Because I know it's kind of hard to see the little screen down here. 9 00:00:55,660 --> 00:00:58,020 So anything that shows up down here will show up. 10 00:00:58,040 --> 00:01:09,400 So to start off, I'm going to tell you how I got this project working so that when you guys have a cool project that you want to start, you'll know where to go. 11 00:01:09,780 --> 00:01:16,760 So first of all, I wanted to know how to sniff Bluetooth packets. 12 00:01:17,180 --> 00:01:23,900 So I did a little bit of research, found out that the Ubertooth one is a pretty cheap solution to do that. 13 00:01:24,300 --> 00:01:27,760 So once I knew about that, I go. 14 00:01:28,040 --> 00:01:31,940 I went ahead, I went to Google, and did a little bit of research. 15 00:01:32,420 --> 00:01:40,140 That's what you'll want to do first, so that you have an idea of what you're looking at, and just get a general overview of what you're doing. 16 00:01:41,380 --> 00:01:51,200 So I just went to the wiki, went over some basic documentation, watched a few videos. 17 00:01:51,320 --> 00:01:56,480 And once I had that down, then I knew kind of what I needed to do. 18 00:01:59,080 --> 00:02:11,280 So the next step was to be able to read the input from these buttons on the display, and to be able to trigger things to happen once I have that. 19 00:02:11,560 --> 00:02:26,180 So I did a little bit of research on the display, installed the drivers, started working with Python to get it so that I could read when button one was pressed, button two, and button three. 20 00:02:38,740 --> 00:02:39,740 That's the code. 21 00:02:39,820 --> 00:02:44,420 That's all that you need to be able to read what's happening when you press each button. 22 00:02:45,340 --> 00:02:47,960 So it's just a little bit of GPIO ports. 23 00:02:48,120 --> 00:02:53,060 Those are the ports on the Raspberry Pi, and a few if statements to see which one's being pressed. 24 00:02:53,360 --> 00:02:54,400 But as you can see. 25 00:02:59,680 --> 00:03:12,700 Once I run that script, here, you can see exactly which button is being pressed. 26 00:03:13,120 --> 00:03:22,700 And from there, that's how I started to connect the two projects of the Ubertooth and the 27 00:03:22,700 --> 00:03:23,200 display. 28 00:03:23,200 --> 00:03:38,240 So, a few late nights of coding and a few Dr. Peppers later, I came out and I coded 29 00:03:38,240 --> 00:03:38,780 this script. 30 00:03:42,640 --> 00:03:47,400 So what this does is this reads what's going on. 31 00:03:48,100 --> 00:03:50,180 It starts up all the applications. 32 00:03:50,640 --> 00:03:51,700 It looks complicated. 33 00:03:51,900 --> 00:03:52,600 It's really not. 34 00:03:52,600 --> 00:03:55,940 Let me resize a little bit. 35 00:04:02,480 --> 00:04:06,360 Down here, you can see that's the same code that I had running before. 36 00:04:06,560 --> 00:04:07,780 Just a little bit more. 37 00:04:09,320 --> 00:04:14,800 But what this is doing, just to basically walk through, you've got a few debug things. 38 00:04:16,420 --> 00:04:20,660 Then this is running a function that opens up the Bluetooth. 39 00:04:22,500 --> 00:04:22,940 Spectrum. 40 00:04:22,960 --> 00:04:24,020 It just shows a graph. 41 00:04:35,740 --> 00:04:41,280 As you can see, when you start that, you can see all of the Bluetooth communication that's 42 00:04:41,280 --> 00:04:42,260 going on in the area. 43 00:04:42,720 --> 00:04:48,820 And so, using that Python script, I start up this application and it shows up on the 44 00:04:48,820 --> 00:04:49,260 little screen. 45 00:04:49,400 --> 00:04:50,060 You can walk around. 46 00:04:50,980 --> 00:04:51,760 It turns it on for you. 47 00:04:51,760 --> 00:04:54,840 Then, if you hit it again, it comes up to here. 48 00:04:55,460 --> 00:04:57,040 It just does a little bit of automation. 49 00:04:57,700 --> 00:05:04,180 But, I can see every device that's here, the manufacturers, how close it is, the MAC addresses… 50 00:05:04,180 --> 00:05:08,080 It's covering up part of the MAC address, so we don't reveal all your information. 51 00:05:08,480 --> 00:05:13,760 But as you can see, you can see searches, you can see Fitbits. 52 00:05:15,240 --> 00:05:17,440 Pretty much the names of any Bluetooth devices. 53 00:05:17,920 --> 00:05:19,840 It doesn't have to be in discoverable mode. 54 00:05:19,840 --> 00:05:26,000 the uber tooth can see it uh funny thing funny story actually we were walking out of here 55 00:05:26,000 --> 00:05:34,220 yesterday and um it saw something called jonathan's macbook and so we walked by and we saw someone out 56 00:05:34,220 --> 00:05:39,340 with a macbook and we're like hey is this your macbook or like is your name jonathan is this 57 00:05:39,340 --> 00:05:48,060 your macbook and he's like yeah so you can see pretty much everything in the area um so that's 58 00:05:48,060 --> 00:05:55,500 the bluetooth portion of it then the wi-fi portion you hit this middle button it closes out of that 59 00:05:55,500 --> 00:06:04,320 program and switches into kismet which is a monitoring tool um just wait a second for it 60 00:06:04,320 --> 00:06:12,160 to connect to the server there you go it sees all the wi-fi networks it captures those packets 61 00:06:12,160 --> 00:06:17,720 and once you have that then you'll be able to take it into wireshark and see um 62 00:06:17,720 --> 00:06:18,040 um 63 00:06:18,060 --> 00:06:26,460 what you can get out of that information so there's that portion of the um there's the wi-fi 64 00:06:26,460 --> 00:06:35,200 portion and then the final portion is anime because priorities right so and it actually 65 00:06:36,000 --> 00:06:42,520 the anime doesn't show up through vnc but as you can see it does show up through here 66 00:06:44,040 --> 00:06:48,000 you can come up and see it after the presentation i think it's probably just 67 00:06:48,060 --> 00:06:54,980 with the drivers to run it but yeah that's how i made my arm mounted uber tooth 68 00:06:55,640 --> 00:06:59,880 sniffing wi-fi sniffing and uh anime watching 69 00:07:02,580 --> 00:07:04,800 um does anyone have any questions