SubGhz Bruteforce Attack with Flipper Zero

Рет қаралды 17,593

6 ай бұрын

Watch as a SubGhz attack is performed on a gate. It is a dark video, but you can see the gate opened through the side view mirror. I am using the XTREME firmware and happen to have a Flux Capacitor from Rabbit Labs attached to the Flipper Zero.

Пікірлер: 63

@dubhead_dena 4 ай бұрын

Finally someone explained it properly and showed it! Thank you for this tutorial!!!

@PenTestTuner 4 ай бұрын

So happy to help.

@timothyjones4058 3 ай бұрын

Omg thank you so much lol

@PenTestTuner 3 ай бұрын

Absolutely.

@brunoaduarte 5 ай бұрын

Just one note: this is an old and very weak security system, not used in most places nowadays. This security system is based on setting the "secret" by selecting dip switches in the electronic board, the "secret" is fixed and will only change if the owner changes the dip switches of the gate and the remote. Then you will have to brute force again. But most gates today are based on much more complex rolling codes, 1 brute force can take days and even if you manage to open it, the next code will be different. Totally not pratical. But very cool video anyway. Thanks.

@PenTestTuner 5 ай бұрын

I agree with all of this, however, most garage door and gate systems still use this technology because they have yet to purchase a new system. Weakness is still prevalent even though new tech is available. A chain is only as good as its weakest link.

@NewDiscord-hr3jj 3 ай бұрын

True. But, the amount of outdated shit in use all over the place might surprise you. The common "cyber security" knowledge is that WPS attacks have been dead for years. But a researcher recently had a 39% success run testing WPS in the wild. So yea.

@Thadopeera 2 ай бұрын

It’s about time someone was out in the field showing Flippers capabilities instead of another “ This is how you update firmware “ video 🤣

@PenTestTuner 2 ай бұрын

The field is the best way to learn.

@iiiiiiiiiiii7702 5 ай бұрын

Looks legit respect to this man🎉

@PenTestTuner 5 ай бұрын

Thank you.

@AndyDeiu 6 ай бұрын

Good tutorial. Hopefully it gets more views because it shows that it’s not a fake video. This is a genuine method ! Thanks ❤

@PenTestTuner 6 ай бұрын

Thank you for the support.

@WPGinterceptor460Interceptor 5 ай бұрын

this is a real bruteforce video, not like the other cloning videos on youtube

@PenTestTuner 5 ай бұрын

Thank you.

@mpmiroslavpenev555 5 ай бұрын

Super video tanks man !👍

@PenTestTuner 5 ай бұрын

No problem.

@MarcellJjr Ай бұрын

this is helpful. more vids like this please

@PenTestTuner Ай бұрын

Thank you.

@ggonmar 3 ай бұрын

How do you know what option of the bruteforce list you should use? you went straight for the linear 10bit, but how did you know that was the one to use?

@PenTestTuner 3 ай бұрын

I have done allot of testing.

@norman157 21 күн бұрын

Do I have to use Linear 10 bit? Or is there any other way I can figure out which one works, without actually just trying all of them one by one.

@PenTestTuner 21 күн бұрын

Each protocol has vendors that are using it. You have to know or figure out what vendor uses what protocol. Please keep in mind that not every protocol that vendors use is listed in the Bruteforce app.

@elmalinois3767 6 ай бұрын

What kind of upper board are using? Thanks

@PenTestTuner 6 ай бұрын

I’m using the Rabbit-Labs Flux Capacitor. kzfaq.info/get/bejne/a819eLqF0p-7pY0.htmlsi=0ouzkXeQ02JKdHR0

@dandobi 5 ай бұрын

Awesome video. Thanks for this. Can I ask how you knew to be on the linear 10 bit 300? Thanks!

@PenTestTuner 5 ай бұрын

I knew to use that protocol because I have spent hours trying all the different protocols.

@dandobi 5 ай бұрын

@@PenTestTuner amazing thanks. So is it pretty much a guess and check situation? Or is there some kind of magical document somewhere that tells ya which protocols do what? Thanks again man

@PenTestTuner 5 ай бұрын

With me, it is kind of a guessing game. It really comes down to what is used in an area or country. There has to be a document or a way to determine what protocols manufacturers used in there products, but I have yet to find it. I’m still looking though.

@betterfresh3397 4 ай бұрын

Can I use every antenna like an antenna from a USB WLAN Adapter like Alfa awus or do I need a special antenna?

@PenTestTuner 4 ай бұрын

You should be using an antenna appropriate for the type of signal you want to use or receive. Some antennas are designed for 433Mhz signals while others are tuned for 900Mhz signals. It sounds like the antennas you describe in your question are WIFI 2.4Ghz or 5Ghz. 2.4Ghz and 5Ghz antennas will not help with what is done in this video.

@betterfresh3397 4 ай бұрын

@@PenTestTuner thank you very much. Yes, it's a wifi antenna for WLAN Adapter I tried. I ordered immediately the right antenna today on Amazon. Same day delivery 😄. Thanks a lot my friend! Your videos are very very interesting!

@rikuspistorius1355 26 күн бұрын

Does doing this interfere with any other remotes that are assigned to that gate? Great video btw

@PenTestTuner 26 күн бұрын

No, running this type of attack does not disrupt the use of other remotes paired to the gate.

@MultiGreenbuds 2 ай бұрын

did you specifically inspect the gate to see what protocols it might be running ? is that how you chose the linear 300 ?

@PenTestTuner 2 ай бұрын

I did not.

@PenTestTuner 2 ай бұрын

I have been testing for a long time and have figured out what protocols are needed.

@Pinoy420Mike 3 ай бұрын

Sheeessssh! Goodshit bro !!! lol

@PenTestTuner 3 ай бұрын

Thank you.

@hovanboyajian3643 6 ай бұрын

how did u figure out which Bruteforce program does it?

@PenTestTuner 6 ай бұрын

Most codes where I am, use this protocol. I have spent many hours figuring it out.

@mattwashington83 5 ай бұрын

what gpio board are you using?

@PenTestTuner 5 ай бұрын

In this video, I am using the Flux Capacitor by Rabbit-Labs.

@Erks89 2 ай бұрын

would the same be for flat doors?

@PenTestTuner 2 ай бұрын

If it can be “Brute Force” attacked.

@GrowLearnShare 4 ай бұрын

What mod do you have on top with 2 antenna?

@PenTestTuner 4 ай бұрын

I am using a board called the “Flux-Capacitor”. It is using 1 antenna in this video.

@mrcrunches2750 Ай бұрын

Whats the extension

@PenTestTuner Ай бұрын

In that video I am using the Rabbit-Labs Flux-Capacitor.

@fxh0113 24 күн бұрын

Do I need the Antenna?

@PenTestTuner 24 күн бұрын

It extends range quite a bit.

@fxh0113 24 күн бұрын

@@PenTestTuner Oh ok

@quing 18 күн бұрын

What firmware?

@PenTestTuner 18 күн бұрын

I am currently using Momentum, but in this video I believe I am using XTreme.

@quing 18 күн бұрын

@@PenTestTuner Which is better?

@PenTestTuner 18 күн бұрын

I have not used XTreme in a while, so I would not be able to give you a great answer on that. Try both.

@quing 18 күн бұрын

@@PenTestTuner Спасибо)

@paul.0 5 ай бұрын

what antenna do you use? link pls

@PenTestTuner 5 ай бұрын

In this video, I used this one. www.tindie.com/products/tehrabbitt/rabbit-labstm-flux-capacitor-amplified-cc1101/

@kilosierra1560 5 ай бұрын

great vid for the culture

@PenTestTuner 5 ай бұрын

Thanks you.

@raylo91 6 ай бұрын

Do I need to use the flux cap if I’m in the garage and not trying to brute force any of my neighbors? 😂

@PenTestTuner 6 ай бұрын

You don’t. But try to get out a little more. Hahaha.