PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Examining the August Smart Lock

blog.quarkslab.com | research | #reverse-engineering | #iot | #ble | #bluetooth | #smart-lock | #august
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A reverse engineering study of the August Smart Lock 3rd generation and its Bluetooth Low Energy attack surface, examining whether a nearby attacker could interact with the lock.
Published
Collected

Related coverage

research · eshard.com
The Bluetooth smart lock which spoke too much
A few years ago, looking for something fun to do, we stumbled upon what seemed to be a nice Bluetooth Smart Lock on Amazon.
research · blog.quarkslab.com
A modern tale of blinkenlights
Quarkslab extracts a €12 smartwatch's firmware using a modern variant of a 2000s hardware attack with cheap, robust tooling; the JieLi-based watch lacks real health sensors.
research · blog.quarkslab.com
Bluetooth Low Energy GATT Fuzzing
Quarkslab presents a fuzzer for the Bluetooth Low Energy GATT/ATT layers, built around attack scenarios from an in-depth spec study; it uncovered bugs and vulnerabilities across several BLE stacks.
blog · bishopfox.com
An Introduction to Bluetooth Security
An introduction to Bluetooth Low Energy security focused on version 4.2, covering the BLE stack, how it differs from Bluetooth Classic, and options for penetration testing BLE devices.
blog · blog.trailofbits.com
You could have invented that Bluetooth attack
Trail of Bits explains the invalid curve point attack behind Biham and Newman's BLE bug, showing how unsanitized curve parameters let attackers recover ECDH keys on patch-averse IoT devices.
blog · bugcrowd.com
A guide to Bluetooth Low Energy hacking
An educational guide to Bluetooth Low Energy hacking: how radio waves and frequency shift keying carry binary data, plus techniques for attacking BLE-enabled devices.
Back