所以在这个视频中我们将会看到一个智能锁，它是一个比利 - 巴斯锁 So in this video of we are going to have a look at the Smart Lock which is a Billy Bass lock on water
要执行的构建 Building to do is
将首先确定智能锁和盆地的地址，将在夜间进行 Will first identify the address of a Smart Lock and Basin that will go ahead and slip the night
Facebook 流量 Facebook traffic
查看正在返回的句柄以及正在写入和精细的值 See what handles are being returned and what are the values that are being written and finely
我用 Gap 工具把他们干干了 I dried them ourselves using Gap tool in order to
解锁 Unlock the
不需要任何被褥的任何认证的锁 Lock without any authentication of without the need of any bedding
所以第一步你可能只需登录我的虚拟机 So the first step you may just log into my virtual machine
确保我有好的适配器 Make sure I have the ble adapter
可用 Available
可以由罪犯逃脱 Which can be done by escaped convict
使用 T8 工具发行版来查看我周围的啤酒设备可以或让我们使用 Look at the beer devices around me using a T8 tool release can or let's use
蓝色的九头蛇 Blue Hydra for that matter let's do a bin
蓝色九头蛇 Blue Hydra
我开始寻找设备 I'm start looking for devices
一旦扫描开始就按下你快锁上的按钮 Once the scanning has started just press the button that's available on your quick lock
确保蓝海德拉能探测到 To make sure that a blue Hydra is able to detect it
因为一旦你按下锁上的按钮 Because once you press the button on the lock
广告本身就会开始 It will start advertising itself
将询问是否有任何人可以连接到锁定 Will ask for if anyone is available to connect to the lock
只要按下按钮 So just press the button
你可以看到我们在这里有个智能锁 As you can see we have a Smart Lock over here
咬一口 Bite
所以说吧 So let's just say
这是个挂锁 Exit this on this is a padlock
这波 The ble
芯片由德州仪器制造 Chip is made by Texas Instruments
这是个 ble 版本 This is a btle version
很像蓝牙低能，但是你有兴趣 Really like the Bluetooth low energy but you are interested in
这是地址 On this is the address
对 Right
所以现在我们知道地址我们可以用uber牙齿来嗅出流量 So now that we know of the address we can actually use ubertooth in order to sniff the traffic
萨福克在我们使用智能通话的同时 Suffolk while we operate the smart talk using
手机上的应用 The application on a mobile phone
因此，您可以下载实验室手册中提到的快速锁定应用程序 So you can download the quick Lock application as mentioned in your lab manual
然后，您可以开始添加锁定，并尝试解锁并锁定该锁定，然后在该过程中捕获该树胶 And you can start adding the lock and try to unlock and lock it and in that process capture the gum
导航 Navigation
应该让我塞进我的乌伯牙 Supposed to fall let me just plug in my Uber tooth
我就做个假 I'll just do a pseudo
你说的乌伯牙 Ubertooth you tell
- 五五 - V
看来蓝牙设备找不到了 Looks like it could not find the Bluetooth device that's right again
我们再试一次 Let's try it again
我可以在这里检测到 And I'll be able to device detected over here
这就是 So this is
将会是地址 Going to be the address
为 5 7 做 MKV Let's do MKV for 5 7
看起来 5 个 7 已经存在 8 个 Looks like five 7 already exists 8
信封 Envelope
让它嗅到管子 8 现在我们可以去夏威夷鲨鱼上添加这个特殊的管道接口 Make it sniffing pipe 8 and now we can go to Hawaii shark on add this particular pipe interface
接口 Interfaces
转至管理界面 Go to manage interface
喉管 Pipes
给它一个新的管道名温度 8 Give it a new pipe name temp by 8
进入 Enter
现在我们可以开始嗅嗅 And now we can start sniffing
在这个特别的 On this particular
管 Pipe
让我们一起 Let's run this
这里也是 Here let's also
再开始嗅嗅 Again start the sniffing
因为你可以看到很多流量的流量越来越多或者几乎都是广告 As you can see there's a lot of traffic that's coming most of it or almost all of it is the adverb
Json 包 Json package
广告包 Are the advertising packets
如你所见 As you can see from here
所以现在我们只对数据包感兴趣 So now we are interested in only the data packets
我们要做一辆 bdl2 驾驶室 CID 等于 20004 So we'll do a bdl2 cab. CID equals 20004
正如您现在所见，我们没有任何数据包 And as you can see as of now we don't have any data packets
所以我接下来要做的是连接我的手机 So what I'm going to do next is connect my mobile phone
启用蓝牙并连接到智能锁 Enable Bluetooth and connect to the Smart Lock
所以我的锁连接好了让我按下解锁按钮 So my lock is connected now let me just hit the unlock button
你可以看到这里有很多包 And as you can see we have a number of packets over here
咬一口 Bite
所以我们去正确的包 So let's go to the right packets
看看价值观 And look at the values
这个是汉德尔的 rx30 7 或 6 So this one is Handel's rx30 for 7 or for 6
看看今天的歌词是什么 Look at what's going on lyrics is it for today
这其实是回应让我们去请求 This is actually the response let's go to the request
如果你看看这里 And if you look over here
今天的本田歌词结果 The Honda lyrics result today
值是我在配置鼠标时最初说的实际密码 On the value is the actual password I said initially while configuring mice
智能锁初始密码为 1 2 3 4 5 6 7 8 Smart locks to the password initially was 1 2 3 4 5 6 7 8
说同样的密码 Say says the same password
从两个零开始，重复两次 Started with two zeros and repeated twice
现在你知道密码是 So now that you know that the password is one of the packets that
正在发送今天的正确请求 Is sending the right request which is it Exeter today
安迪把密码再直了看看他能不能 Andy value the password straight again and see if he get off
动物水桶 Animal buckets
所以我再把我的设备解锁 So I'll just unlock my device once more
还有 And
口袋里应该是一栋楼 The pockets should be a building over here
快了 Pretty soon
你可以看到我们有很多包在屏幕上 As you can see we have a number of packets that has a beard in the screen over here
所以现在你要做的就是寻找那些 So now all you need to do is look for the packets which are
看来对我们有意思 Appearing to be interesting to us
所以 So
重新打开设备，如果您在此处查看 Hi again unlock the device and if you look over here
我有几个正确的要求 I've got a couple of right request
其中一个是 So one of them is
Xerox Elizabeth re7 ，因为它包含值，所以特别有趣 Xerox Elizabeth re7 which is particularly interesting because it holds the values
小的 Little one
这可能意味着 01 S4 解锁权限 Which could mean something like this is the 01 S4 unlock right
你可以很明显看看所有口袋里的东西 You can obviously look at all the different pockets and try to figure out what package stands for what
执行操作和次数 Perform the operation and number of times
MC 是什么 MC what
口袋里你看到的最有可能是什么 Pockets do you see most likely and what are the
数据包之间的相似性 Similarities between the packets
但现在，我们已识别到一个包，其中一个带有句柄 rx10 3/7 But for now we have identified to a packet switches one with the handles rx10 3/7
但价值 01 But the value 01
用手柄 0 x 0 0 2 D On the other with the handle 0 x 0 0 2 D
我们最初看到的是 Which we saw initially
如果你看看这里 If you look over here
这就是密码 And this is the value which is the password
现在让我们去 Ja 规则，自己试着写这些价值观 Now let's go to Ja Rule and try to write these values ourselves
我看是否有智能锁解锁 I will see if a Smart Lock unlocks
所以我们取消优步 So let's cancel the Uber with captured
亲善大使 Goodwill Colleyville
连接到这个挂锁 Connect to this padlock
所以到 9 号之后 So got to - 9 - be followed by this
连接 Connect
让我们再次尝试连接 Let's try to connect again make sure to put the
广告心情中要连接的设备 Device in the advertising mood if you want to connect
如果你有 That's actually make sure if you have
好吧我们没有蓝牙适配器 Okay so we don't have the Bluetooth adapter connected
让我们先停止首次连接 Let's stop First Connect this
三星没有 Samsung no
应该可以 It should work
所以我们现在连接蓝牙适配器，让我们去做一个连接 So we have the Bluetooth adapter connected now let's go to got to do a Connect
在 On
我们成功地连接了 We have successfully connected
如果你看看第一把手你要写的是 08002 d And if you look at the first handle that you have to write at 08002 d
这是评分 PDF 的值 And this is the value to the score PDF
价值 Value
Cigar right 请求 Cigar right request
今天埃克塞特 Did Exeter today
后跟密码 Followed by the password
我终于知道原因了 已解决，针对 0 3 7 I'm finally the reason packet. Resolved which was directed at 0 3 7
后跟值 01 请求 Followed by the value 01 request
37 方向 Directions to 37
其次是 Followed by
01 让我们尝试一下 01 let's try to run this
正如您预期锁定现已解锁 As you can expect a lock has now unlocked right
这样你就可以在 3 个方面接管智能锁 So this is how you can take over Smart Lock up in 3
步骤过程 Step process
所以第一步是识别地址 So the first step is to identify the address
8 发行版中滥用 Abusing at 8 release can
然后我们用 Wireshark 和 uberwerk 嗅到包 Then we sniff the packet using Wireshark and ubertooth
看看不同的手柄，里面有哪些不同的值， Look at the different different handles and what are the different values that go inside that
一旦我们发现 On once we figured that out
我们只需使用该工具就可以编写这些值 We simply use that tool in order to write those values
就是这个学习包也是这个视频的 So that's all for this learning kit and that's all for this video as well
希望你玩得开心 Hope you had fun doing all the exercises
如果你有任何问题或者如果你被困在任何实验室里 And if you have any issues or if you're stuck in any kind of labs feel free to drop us an email
在 artify 处添加支持。 Com Add support at artify. Com
如何迅速回到你的 How to get back to you extremely quickly