+ All Categories
Home > Documents > The Machines that Betrayed their Masters

The Machines that Betrayed their Masters

Date post: 02-Jul-2015
Category:
Upload: e-hacking
View: 786 times
Download: 0 times
Share this document with a friend
Description:
Your machine (mobile phone, bluetooth device, router etc etc) may betrayed you and can be used to detect your position or even invade your privacy. They are watching you, stay alert.
40
The Machines That Betrayed Their Masters ZeroNights 2013
Transcript
Page 1: The Machines that Betrayed their Masters

The Machines That Betrayed Their Masters

ZeroNights 2013

Page 2: The Machines that Betrayed their Masters

@glennzw

Glenn Wilkinson@glennzw

SensePost.com

Page 3: The Machines that Betrayed their Masters

@glennzw

•2-y Donskoy proyezd, 7/1, Moscow

•Leninskiy prospekt., 2А, Moscow

•Ulitsa Bakhrushina, 24 строение 1, Moscow

•Rublevskoye shosse, 44, Moscow

•Krylatskaya ulitsa, 23, Moscow

•Ulitsa Sushchevskiy Val, 46 строение, Moscow

•Ulitsa Krasina, 3, Moscow

•Bolshaya Sadovaya ulitsa, Moscow

Page 4: The Machines that Betrayed their Masters

@glennzw

•P132, Kaluzhskaya

•Nevsky Prospect, 114, Saint Petersburg

•Prospekt Medikov, St Petersburg

•Ulitsa 8 Marta, 41, Yekaterinburg

Page 5: The Machines that Betrayed their Masters

@glennzw

•North 16th Street, Philadelphia, USA

•Captain Cook Drive, Australia

•Trillerpark, 1210 Viena, Austria

•3 Luvianpuistokatu, Satakunta, Finland

Page 6: The Machines that Betrayed their Masters

@glennzw

•Wingate by Wyndham, Dallas, Texas, USA

•Hotel Strata, California, USA

•Hotel Hacienda, Spain

•Sunrise Diamond Beach Resort, Egypt

•5Footway Inn, Singapore

•H2O Hostel Ljubljana, Slovenia

Page 7: The Machines that Betrayed their Masters

@glennzw

Page 8: The Machines that Betrayed their Masters

@glennzw

Page 9: The Machines that Betrayed their Masters

@glennzw

Page 10: The Machines that Betrayed their Masters

Machines? Betrayal?

Page 11: The Machines that Betrayed their Masters

@glennzw

Page 12: The Machines that Betrayed their Masters

@glennzw

Machines?

Page 13: The Machines that Betrayed their Masters

@glennzw

Betrayal?

Page 14: The Machines that Betrayed their Masters

A Device

Page 15: The Machines that Betrayed their Masters

A Unique Signature

Page 16: The Machines that Betrayed their Masters

A Link from Signature to a Human

Page 17: The Machines that Betrayed their Masters

@glennzw

Snoopy Framework

Page 18: The Machines that Betrayed their Masters

@glennzw

Page 19: The Machines that Betrayed their Masters

@glennzw

Page 20: The Machines that Betrayed their Masters

@glennzw

Page 21: The Machines that Betrayed their Masters

@glennzw

XBee

XBee

XBee3G

Page 22: The Machines that Betrayed their Masters

@glennzw

XBee

XBee

XBee3G

XBee

XBee

XBee3G

Ethernet

Ethernet

Page 23: The Machines that Betrayed their Masters

@glennzw

Page 24: The Machines that Betrayed their Masters

A Unique Signature

Page 25: The Machines that Betrayed their Masters

98:03:ab:32:11:33

Page 26: The Machines that Betrayed their Masters

Linking the Signature

Page 27: The Machines that Betrayed their Masters

Linking the Signature

1. Passive Linking

Page 28: The Machines that Betrayed their Masters

BTHomeHub-AFV1, are you there?Starbucks, are you there?Virgin-AFVT, are you there?Is anyone out there?

98:03:ab:32:11:33

Page 29: The Machines that Betrayed their Masters

BTBusinessHub-2DF1

Virgin-AFVT

Starbucks

Starbucks

Virgin-AFVT 50.507 -0.128Starbucks 50.408 -0.041

BTBusinessHub-2DF1 50.601 -0.045Starbucks 50.391 -0.050

SSID GPS Lat GPS Long

Page 30: The Machines that Betrayed their Masters

@glennzw

BTHomeHub-AFV1, are you there?Starbucks, are you there?Virgin-AFVT, are you there?Is anyone out there?

98:03:ab:32:11:33

Page 31: The Machines that Betrayed their Masters

@glennzw

Linking the Signature?

2. Active Linking

Page 32: The Machines that Betrayed their Masters

@glennzw

BTHomeHub-AFV1, are you there?Starbucks, are you there?Virgin-AFVT, are you there?Is anyone out there?

98:03:ab:32:11:33

Hey iPhone! It’s me, Starbucks!

Page 33: The Machines that Betrayed their Masters

Intertubes

BTOpenzoneVirginMedia-AR45

BTHomeHub-BHA7Starbucks

00:11:22:33:44:55

00:22:33:44:55:66

Drone001

Client00100:11:22:33:44:55

Client00200:22:33:44:55:66

Drone002

Client00311:22:33:44:55:66

Client00444:55:66:77:88:99

squidsslstripmitmproxy

<script src=profiler.jsp>IP= 10.2.0.45

Site= www.facebook.comCookie = supersecretcookie

IP= 10.2.0.45Site= www.facebook.com

username: joepassword: secret

Traffic Inspector

Social Media APIs

SnoopyServer

Page 34: The Machines that Betrayed their Masters

@glennzw

Page 35: The Machines that Betrayed their Masters

@glennzw

Page 36: The Machines that Betrayed their Masters

@glennzw

Page 37: The Machines that Betrayed their Masters

@glennzw

Page 38: The Machines that Betrayed their Masters

@glennzw

Scenarios

Page 39: The Machines that Betrayed their Masters

@glennzw

Conference Unique  Devices Number  of  A4endees

Device  Per  Person

BlackHatVegas2012 4778 6500 0.74

ITWeb2012 1106 400 2.77

44CON2012 969 350 2.77

BlackHatEU2013 681 607 1.12

Securitay2013 375 100 3.75

BSides2013 208 474 0.44

Hackito2013 309 400 0.77

CERT  Poland2013 598 500 1.2

ZeroNights2013 507 ?

Page 40: The Machines that Betrayed their Masters

@glennzw

[email protected]@sensepost.com

http://research.sensepost.com/


Recommended