Hacking into your car through BLE! A Hands-on Testing Demo
This workshop equips attendees with a foundational understanding of Bluetooth Low Energy (BLE), and Controller Area Network (CAN). Through theory and practical exercises, participants will gain insights into BLE and CAN communication, potential vulnerabilities, and best practices for securing these interactions. The hands-on training involves hacking a BLE communication link between a simulated car and a mobile application. The exercises utilize open-source tools which can be used with easily accessible hardware so the attendees can build up a similar setup on their own after the workshop.
The participants will use some of the most widely used Bluetooth hacking tools like BLE sniffers (ubertooth, nRF sniffer), BLE packet injectors (gatttool, hcitool). The exercises will include discovering the services advertised by the virtual car, overwriting characteristics which will change the behaviour of the virtual car.