ESP32/ESP8266 Wi-Fi AttacksTIPoT Technologies

ESP32/ESP8266 Wi-Fi Attacks

Sam
September 6, 2019
ESP, ESP32, ESP8266, Security, XTENSA

Source:github

This repository(https://github.com/Matheus-Garbelini/esp32_esp8266_attacks) is to demonstrate 3 Wi-Fi attacks against the popular ESP32/8266 IoT devices:

Zero PMK Installation (CVE-2019-12587) – Hijacking ESP32/ESP8266 clients connected to enterprise networks;
ESP32/ESP8266 EAP client crash (CVE-2019-12586) – Crashing ESP devices connected to enterprise networks;
ESP8266 Beacon Frame Crash (CVE-2019-12588) – Crashing ESP8266 Wi-Fi devices.

Follow the links on each vulnerability for more details and Espressif’s patches.

This vulnerabilities were found in SDKs of ESP32 and ESP8266. Their version were ESP-IDF v4.0-dev-459-g7a31cb7 and NONOS-SDK v3.0-103-g7a31cb7 respectivelly at the time of the vulnerabilities discovery.

While a custom version of hostapd is provided to test the first 2 vulnerabilities, for the last one, an ESP8266 is used to inject fake 802.11 beacon frames in order to crash others of its own (no pun intended!).

No Comments

Leave a Comment Cancel reply

Inspired by the open source initiative and to offer low-cost solution with non-constrained R&D flexibility, the TIPoT platform is developed based on free open source software, with the following notable features:

Low-cost hardware platform.
A variety of sensing and display accessories (current examples include light, temperature & humidity, sensing and LCD display).
Free, feature-rich Integrated Development Environment (IDE)
Free, feature-rich network protocol analyzer.
Open source operating system, Contiki (www.contiki-os.org), offers extensive design, research and development flexibility.
Arduino shield pinout compatible.
Software suite includes typical sensing, monitoring, and control application examples, as well as an end-to- end application framework, all using TCP/IPv6 protocol over IEEE 802.15.4.
Significantly lowers the cost for test/experimental R&D and/or prototyping on TCP/IPv6 over wireless sensor network.

Fitness, medical and healthcare industry
- design and development of tele-health monitoring devices, applications and services; and other wearable or portable monitoring and safety devices and relevant applications.
Sensing and control applications/services
- including smart home/office/building, industrial process control and monitoring, agricultural and environmental monitoring, robotics sensing and control, and so on.
Appliances and consumer electronics products
- using our technology as embedded smart communication and control module.

Researchers at universities, colleges, government and industrial research institutions/labs
- for implementing prototypes, establishing large-scale testbeds for experimental research and performance evaluation of applications, protocols, algorithms, as well as complete products, related to IoT and other relevant technologies
R&D engineers, science/technology enthusiasts, inventors, IoT device vendors, application developers, and service providers.
- for the design of novel IoT devices, applications, services, and fast development of prototypes, final products and tools.
Education community
- e.g. academic institutions and colleges, high schools, for classroom teaching, professional training, course projects, experiments, science fairs, etc.
- Teaching and technical training in embedded system programming, embedded operating systems, wireless sensor networks, network protocols, and so on. (Lecture notes and lab materials coming soon…)
Hobbyists and makers
- for developing various IoT applications and devices.