Bluetooth Hacking - Full Disclosure
Short summary:
Bluetooth Hacking Full Disclosure @ 21C3. Blue snarfing Data Theft Calendar Appointments Images Phone Book Names, Addresses, Numbers PINs and other codes Images Bluetooth Hacking Full Disclosure ...
Long summary:
Bluetooth Hacking Full Disclosure @ 21C3 Bluetooth Hacking Full Disclosure @ 21C3 Hacking Bluetooth enabled mobile phones and beyond Full Disclosure 21C3: The Usual Suspects 21st Chaos Communication Congress December 27th to 29th, 2004 Berliner Congress Center, Berlin, Germany Adam Laurie Marcel Holtmann Martin Herfurt Bluetooth Hacking Full Disclosure @ 21C3 Who we are Adam Laurie CSO of The Bunker Secure Hosting Ltd. Co-Maintainer of Apache-SSL DEFCON Staff/Organiser Marcel Holtmann Maintainer and core developer of the Linux Bluetooth Stack BlueZ Martin Herfurt Security Researcher Founder of trifinite.org Bluetooth Hacking Full Disclosure @ 21C3 Outline (1) Bluetooth Introduction History Technology Overview The BlueSnarf Attack The HeloMoto Attack The BlueBug Attack Bluetooone Long-Distance Attacking Bluetooth Hacking Full Disclosure @ 21C3 Outline (2) Blooover Blueprinting DOS Attacks Sniffing Bluetooth with hcidump Conclusions Lessons tought Feedback / Discussion Bluetooth Hacking Full Disclosure @ 21C3 Bluetooth Introduction (1) Wire replacement technology Low power Short range 10m 100m 2.4 GHz 1 Mb/s data rate Bluetooth Hacking Full Disclosure @ 21C3 Bluetooth Introduction (2) Bluetooth SIG Trade Association Founded 1998 Owns & Licenses IP Individual membership free Promoter members: Agere, Ericsson, IBM, Intel, Microsoft, Motorola, Nokia and Toshiba Consumer http://www.bluetooth.com Technical http://www.bluetooth.org Bluetooth Hacking Full Disclosure @ 21C3 History (1) Bluejacking Early adopters abuse Name field to send message Now more commonly send Business Card with message via OBEX Toothing Casual sexual liasons Bluetooth Hacking Full Disclosure @ 21C3 History (2) Bluesnarfing First publicised by Marcel Holtmann, October 2003 Wireless Technologies Congress, Sindelfingen, Germany Adam Laurie, A L Digital, November 2003 Bugtraq, Full Disclosure Houses of Parliament London Underground Snarf networking slang for unauthorised copy Bluetooth Hacking Full Disclosure @ 21C3 History (3) Blue snarfing Data Theft Calendar Appointments Images Phone Book Names, Addresses, Numbers PINs and other codes Images Bluetooth Hacking Full Disclosure @ 21C3 History (4) Bluebugging First publicised by Martin Herfurt, March 2004 CeBIT Hanover Create unauthorised connection to serial profile Full access to AT command set Read/Write access to SMS store Read/Write access to Phone Book Bluetooth Hacking Full Disclosure @ 21C3 History (5) Full Disclosure after 13 months More time for manufacturers to fix Embedded devices New process for telecom industry Nokia claims to have fixed all vulnerable devices Firmware updates available 6310i tested OK Motorola committed to fix known vulnerabilities Sony Ericsson publicly stated all problems fixed Bluetooth Hacking Full Disclosure @ 21C3 Bluetooth Technology Data and voice transmission ACL data connections SCO and eSCO voice channels Symmetric and asymmetric connections Frequency hopping ISM band at 2.4 GHz 79 ...
Source: trifinite.org
Related
Bluetooth Hacking - Full Disclosure, Bluetooth Hacking Full Disclosure @ 21C3.
Blue snarfing Data Theft Calendar
Appointments Images Phone Book Names,
Addresses, Numbers PINs and other codes
Images Bluetooth Hacking Full Disclosure
...,
more
Hacking Bluetooth Enabled Mobile Phones and Beyond, Bluetooth Scatternet. All security
routines are inside the Bluetooth chip.
Bluetooth Technology Data and voice
transmission ACL data connections SCO and
eSCO voice channels Symmetric and
asymmetric connections Frequency hopping
ISM band ...,
more
An Ethical Guide to Hacking Mobile Phones, Bluetooth Hacking. Bluejack Attack OBEX
Push Bluespamming Bluetoothing Modifying a
Remote Mobile Phones Address Book Fadias
Hot Tools for Bluejacking Countermeasures,
more
