Hacker Halted 2014: When Zombies Take to the Airwaves

Preview:

DESCRIPTION

Hacker Halted Atlanta, GA Thursday, October 16 2014 In a post-apocalyptic world, communication is going to be crucial for the survival and zombies alike. Long range, paid, and mobile communication is going to be a must in order to properly organize, defend and ultimately survive. So naturally wireless communication is going to be a critical infrastructure but how will it hold up? Can it be leveraged to give us the upper hand? The idea behind this talk is to demonstrate how existing 802.11 technologies can be used to not only provide the critical communication medium needed to organize but that we can also use the same technology to disrupt the zombie efforts to do the same. In this talk we will look at some of the weaknesses in wireless technologies that can be used to compromise the zombies communications, find their location to prepare defenses, disrupt the flow of information and if neeed be, take down the entire system. The truth is that we already have a world full of zombies in the form of consumers and the threat to their beloved communication mediums actually put them at risk. At the end of the talk I will show hos this stuff is not only possible but how it is happening in the world today.

Citation preview

When Zombies Take When Zombies Take

to the Airwavesto the Airwaves

rbx@b-sides:~# whoamirbx@b-sides:~# whoami

• Tim Fowler• Sr. IT Security Consultant• mountainsec, LLC• @roobixx

• Tim Fowler• Sr. IT Security Consultant• mountainsec, LLC• @roobixx

rbx@b-sides:~# inforbx@b-sides:~# inforbx@b-sides:~# inforbx@b-sides:~# info• ChristianChristian• Member of WNCInfoSec & Proverbs Member of WNCInfoSec & Proverbs

HackersHackers• Linux Enthusiast Linux Enthusiast • Lover/Hater of all things WifiLover/Hater of all things Wifi• Owes friends & family Owes friends & family

everything! Thanks guyseverything! Thanks guys

• ChristianChristian• Member of WNCInfoSec & Proverbs Member of WNCInfoSec & Proverbs

HackersHackers• Linux Enthusiast Linux Enthusiast • Lover/Hater of all things WifiLover/Hater of all things Wifi• Owes friends & family Owes friends & family

everything! Thanks guyseverything! Thanks guys

Why this talk?Why this talk?Why this talk?Why this talk?

ZOMBIES

ZOMBIES

ZOMBIES

ZOMBIES

How can we possibly use How can we possibly use wireless technology to save wireless technology to save the city in an apocalyptic the city in an apocalyptic

zombie infestation? zombie infestation?

How can we possibly use How can we possibly use wireless technology to save wireless technology to save the city in an apocalyptic the city in an apocalyptic

zombie infestation? zombie infestation?

SCENARIOSCENARIOSCENARIOSCENARIO

• Location: Atlanta, GALocation: Atlanta, GA• Status: Apocalyptic Status: Apocalyptic • Communications: Communications: LimitedLimited• Utilities: OperationalUtilities: Operational• City Wide Wireless: OperationalCity Wide Wireless: Operational• Current Threat:Current Threat:

• Location: Atlanta, GALocation: Atlanta, GA• Status: Apocalyptic Status: Apocalyptic • Communications: Communications: LimitedLimited• Utilities: OperationalUtilities: Operational• City Wide Wireless: OperationalCity Wide Wireless: Operational• Current Threat:Current Threat: ZOMBIESZOMBIESZOMBIESZOMBIES

Zombies cant use smartphones…Zombies cant use smartphones…Zombies cant use smartphones…Zombies cant use smartphones…

……but we can use their smartphone!but we can use their smartphone!……but we can use their smartphone!but we can use their smartphone!

How can we use wireless How can we use wireless technology to save the city technology to save the city

How can we use wireless How can we use wireless technology to save the city technology to save the city

1.1.Information GatheringInformation Gathering2.2.Trend & ForecastingTrend & Forecasting3.3.CommunicationCommunication

1.1.Information GatheringInformation Gathering2.2.Trend & ForecastingTrend & Forecasting3.3.CommunicationCommunication

Information GatheringInformation GatheringInformation GatheringInformation Gathering

sen·sorsen·sornounnouna device that detects or measures a a device that detects or measures a physical property and records, physical property and records, indicates, or otherwise responds to it.indicates, or otherwise responds to it.

sen·sorsen·sornounnouna device that detects or measures a a device that detects or measures a physical property and records, physical property and records, indicates, or otherwise responds to it.indicates, or otherwise responds to it.

https://speakerdeck.com/ussjoin/reticle-dropping-an-intelligent-f-bombhttps://speakerdeck.com/ussjoin/reticle-dropping-an-intelligent-f-bomb

Trend & ForecastingTrend & ForecastingTrend & ForecastingTrend & Forecasting

CommunicationCommunicationCommunicationCommunication

802.11g Channels 1-6802.11g Channels 1-6802.11g Channels 1-6802.11g Channels 1-6

LLIISSCC

LLIISSCC

LLimitedimitedIInstructionnstructionSSetetCCommunicationommunication

LLimitedimitedIInstructionnstructionSSetetCCommunicationommunication

mdk3 mon0 b -f ssid_list.txtmdk3 mon0 b -f ssid_list.txtmdk3 mon0 b -f ssid_list.txtmdk3 mon0 b -f ssid_list.txt

CommunicationsCommunicationsCommunicationsCommunications

Information Information GatheringGathering

Information Information GatheringGathering

Trend Trend ForecastingForecasting

Trend Trend ForecastingForecasting

REALITYREALITYREALITYREALITY

Our fictional scenario is not Our fictional scenario is not as far fetched as it may seem…as far fetched as it may seem…Our fictional scenario is not Our fictional scenario is not as far fetched as it may seem…as far fetched as it may seem…

Wireless Surveillance Wireless Surveillance Wireless Surveillance Wireless Surveillance

Data MiningData MiningData MiningData Mining

Trend ForecastingTrend ForecastingTrend ForecastingTrend Forecasting

Wireless Device Heat Wireless Device Heat Map Map Wireless Device Heat Wireless Device Heat Map Map

CommentsCommentsCommentsComments

Credits & ReferencesCredits & ReferencesCredits & ReferencesCredits & ReferencesCreepyDOL

http://www.gizmag.com/wi-fi-track-smartphone-creepydol/28585/http://arstechnica.com/security/2013/08/diy-stalker-boxes-spy-on-wi-fi-users-cheaply-and-with-maximum-creep-value/http://maliceafterthought.com/

Snoopy

http://sensepost.com/blogstatic/2012/09/maltego_44conCrew_websites.jpghttp://www.bbc.com/news/technology-26762198https://github.com/sensepost/Snoopy

Euclid

http://euclidanalytics.com/solutions/technology/

CreepyDOL

http://www.gizmag.com/wi-fi-track-smartphone-creepydol/28585/http://arstechnica.com/security/2013/08/diy-stalker-boxes-spy-on-wi-fi-users-cheaply-and-with-maximum-creep-value/http://maliceafterthought.com/

Snoopy

http://sensepost.com/blogstatic/2012/09/maltego_44conCrew_websites.jpghttp://www.bbc.com/news/technology-26762198https://github.com/sensepost/Snoopy

Euclid

http://euclidanalytics.com/solutions/technology/

Links and ImagesLinks and ImagesLinks and ImagesLinks and Imageshttps://c1.staticflickr.com/3/2884/9359424465_22f9ee632a_z.jpg

http://upload.wikimedia.org/wikipedia/commons/1/19/Friends_with_Mobile_Phones.jpg

https://c2.staticflickr.com/6/5058/5478285317_d714ab911b_z.jpg

https://c2.staticflickr.com/6/5037/5811758646_c855bf87f9_z.jpg

http://d1oi7t5trwfj5d.cloudfront.net/df/f69ed0301e11e29c5422000a1d0930/file/TextingTheaters.jpg

http://cf.ltkcdn.net/cellphones/images/std/131680-400x281-collegephones.jpg

http://www.ispsupplies.com/core/media/media.nl?id=317994&c=393682&h=87103153604aa9093cd0

http://community.ubnt.com/ubnt/attachments/ubnt/UniFi/16719/1/bandwidth.PNG

https://www.sensepost.com/blogstatic/2012/09/maltego001.jpg

http://upload.wikimedia.org/wikipedia/commons/0/02/NX1Z_Radio.jpg

http://upload.wikimedia.org/wikipedia/commons/2/26/Vu2gmn_antenna.jpg

http://bob.purdon.id.au/wordpress/wp-content/uploads/2013/12/APAC-Controller-Web.jpg

http://www.cisco.com/c/dam/en/us/td/i/200001-300000/230001-240000/231001-232000/231534.tif/_jcr_content/renditions/231534.jpg

http://euclidanalytics.com/solutions/

http://euclidanalytics.com/products/technology/