WASP UAV Gets Some New Toys, Now Intercepts Your Phone Calls Too

August 1, 2011 by Mike Nathan 34 Comments

wasp_drone

If you had the pleasure of attending last year’s DEFCON conference, you are no doubt familiar with [Mike Tassey] and [Richard Perkins]. There, the pair showed off a work in progress DIY aerial drone named WASP. Short for Wireless Aerial Surveillance Platform, WASP was impressive when we brought it to your attention last year, but the duo has spent some time completing their project, adding a few extra features in the process.

The drone still packs the same pico-ITX computer which now runs Backtrack5, and utilizes a 340 million word dictionary for cracking WiFi networks (pardon the pun) on the fly. While updated pen testing tools are well and good, the most impressive update is that the drone can now act as a standalone GSM tower. This allows the pair to trick nearby phones into routing calls through WASP before being relayed to their carrier’s network.

Once WASP is launched, the plane flies autonomously along a preset route, sniffing, hacking, cracking and gathering data until [Tassey and Perkins] summon it back to Earth. The drone is as impressive as it is scary, and we can’t wait to hear what the pair has to say about it this time around.

Continue reading to watch a video demo of WASP taking to the skies and doing its thing.

[via PopSci]

[Thanks, DainBramage1991]

Continue reading “WASP UAV Gets Some New Toys, Now Intercepts Your Phone Calls Too” →

Retro-radio: Building On Another WiFi Radio Hack

July 6, 2011 by Mike Szczys 14 Comments

[Jay Collett] likes listening to Internet radio stations and decided to build his own standalone hardware that lets him listen without being at his computer. But he wasn’t starting from square one on this project. [Jay] built on the epic instruction set that [Mighty Ohm] published when he first built his own WiFi radio.

Both of these radios used the same method of getting onto the internet; a hacked router. We kind of like this because it means you should be able to use the radio as a bridge for wired Ethernet devices. But we digress. [Jay] departs from the instructions by using an Arduino and its IDE to interface an LCD screen with a different line/column orientation than the original, and to implement a different control scheme. This makes the project a bit more approachable if you prefer not to roll your own electronics.

Take a look at the video after the break. The router takes quite a while to boot, but once it does it seems that the controls are both intuitive and responsive.

Continue reading “Retro-radio: Building On Another WiFi Radio Hack” →

Launching Model Rockets Wirelessly

June 24, 2011 by Brian Benchoff 13 Comments

We love ballistic trajectories and the smell of black powder in the morning, so we’re really interested in the wireless rocket launch pad sent in by [Brent Strysko].

[Brent] used an ATmega with an enc28j60 ethernet shield and wireless router to launch the rocket without a physical connection with ‘the button.’ Everything on the launchpad is powered by a 12 Volt motorcycle battery, and there’s also a flashing LED for the countdown. All that’s needed to launch a rocket is to send a command from the laptop. We think this would be an awesome project when combined with the radio telemetry build we covered earlier – the computer is already there with the range safety officer.

Although amateur rocketry is extremely safe, with no high-power flight ever hitting a person (PDF warning), there’s still some risk of from black powder engines CATOing. We think [Brent] came up with a great way to make a safe hobby even safer, and managed an interesting project in the process. Check out the walkthrough of the launchpad after the break, or check out this video of the launchpad in action.

Continue reading “Launching Model Rockets Wirelessly” →

A Suitcase For All Your Wardriving Needs

June 12, 2011 by Brian Benchoff 39 Comments

[Corrosion] sent in a tip about the Weaponised Auditing Response System he built inside a suitcase that, “has all the tools (and then some) for a wireless assault”.

The WARS is equipped with two WiFi adapters and two bluetooth adapters for all the wardriving and bluejacking anyone could ever want. [Corrosion] also included a 4 channel, 2.4GHz video scanner for warviewing. Everything runs off of a 12 inch netbook that will eventually run linux, and we’re really liking the 1970s suitcase aesthetic the WARS has – it looks like [Corrosion] is about to step into the set of a Beastie Boys video.

We were wondering about including a long range RFID sniffing antenna (PDF warning) behind the monitor of the suitcase’s monitor and asked [Corrosion] about it. He said it sounded doable, but is out of funds at the moment, so if you know how to build a cheap RFID antenna with a 50 foot range, drop [Corrosion] a line.

There’s a video demo with some stills of the build included after the break.

Continue reading “A Suitcase For All Your Wardriving Needs” →

Vocera B1000A Teardown

June 5, 2011 by Mike Nathan 17 Comments

vocera_teardown

[Gray] over at Geek Chique had a bit of an eBay mishap and was suddenly the proud owner of 16 Vocera B1000A badges. If you are not familiar, these badges are small, lightweight communications devices similar to the famous Star Trek communicator, which allow users to talk to other individuals via VOIP. He was working on getting the remaining badges up and running by reimplementing the server software, and figured that since one of the badges he purchased was not working, he might as well take it apart.

It took him awhile to get the well-made badges apart, requiring a rotary tool and some elbow grease to get the job done. Inside, he found that the device was split into two circuit boards, one being the “WiFi” board, and the other the “CPU” board. The WiFi board uses a Prism WiFi chipset, which was incredibly common at the time of construction. The CPU board sports small SRAM and flash chips as you would expect, with a Texas Instruments 5490A DSP running the show.

While it remains to be seen if tearing the device down helps [Gray] to get things up and running again, it never hurts to take a closer look to see what you are working with.

I Am Root! – IP Camera Shell Access

June 3, 2011 by Mike Szczys 26 Comments

[Shawn] emailed us some pictures and a description of his latest hack. He cracked open a Rosewill RXS-3211 IP Camera because the output of the web interface made him certain that it was running Linux and he wanted to unlock some more potential from the device. These cameras are used for security, and offer a browser-based interface via a WiFi connection. After studying the circuit board he started poking around an unpopulated set of four pads and managed to get a serial connection up and running. The device’s serial terminal operates at 115200 baud using eight data bits, one stop bit, and even parity.

He wonder where to go from here and we have a few ideas. You can see in the terminal readout above that it announces when motion is detected. We think this motion detection would be quite useful with a small rover while adding live video broadcasting at the same time. An embedded Linux system should be able to interface with the device and we think that a bit of creative coding would open up the WiFi connection for other use as well. Not bad for a module that can be had for as little as $29. We’ve included all the images [Shawn] sent us after the break and we’d love to hear your thoughts on what you’d use this for in the comments.

Continue reading “I Am Root! – IP Camera Shell Access” →

Electronic Bird House Monitoring Goes A Few Steps Further

May 31, 2011 by Mike Szczys 7 Comments

[Stephen Albers] offers his avian friends a lot of extras with this electronically monitored bird house. This will not only give you a look at what’s going on inside, but provide a source for several other bits of data as well.

First off, a camera has been mounted to the underside of the roof. This looks down on the nesting area and features night vision so that you can peek in any time day or night. He used a WiFi webcam that operates separately from the other electronics.

With the remainder of the setup he is able to harvest temperature and humidity data inside, temperature outside, force on the bottom of the house (although this turned out to be less useful than anticipated), and a in-and-out count for the doorway provided by an IR transmitter/receiver pair.

This offers quite a bit more than the last bird house project we saw. That one also left a lot to be desired as far as protecting the electronics. [Stephen] didn’t skip on that kind of protection. Most of the electronics are housed in an acrylic chamber in the base of the house. The sensors find themselves nestled in plastic enclosures, although some work needs to be done to ensure that the temperature and humidity sensors will still function correctly with this setup.