How to begin hacking with the YARD Stick One - Hak5 1908
ฝัง
- เผยแพร่เมื่อ 15 ก.ย. 2024
- Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:
____________________________________________
Getting Started with the YARD Stick One for Sub 1 GHz hacking! All that and more, this time on Hak5.
Support Hak5, follow along and get a YARD Stick One from our very own HakShop at hakshop.myshop...
The YARD in YARD Stick One stands for Yet Another Radio Dongle and it was created by Mike Ossmann of Great Scott Gadgets. You may know him from the Ubertooth One and HackRF One - both great tools for security researchers and pentesters. It was originally based on the Toorcon 14 badge which incorporated a Texas Instruments CC1111 - the same chip found in the famous pink pager, the IM-Me. That was the toy popularized by Mike and Travis Goodspeed because of its hackability.
greatscottgadge...
www.ti.com/corp...
ossmann.blogspo...
RfCat is sort of like the cat or netcat program on Linux. It's written in Python and it's super simple to incorporate the YARD Stick One into your own projects.
bitbucket.org/...
Check out some of the 3D Printed case options for the YARD Stick One and Ubertooth One
/ 1
gist.github.co...
Getting Started in Linux
wget bitbucket.org/...
tar zxvf rfcat_150225.tgz
cd rfcat_150225
sudo apt-get install python-usb
sudo python setup.py install
sudo rfcat -r
As a demo of the rfcat capabilities we check out a recently forked version of Toorchat from team Root The Box adding YARD Stick One support from github.com/hak...
git clone github.com/hak...
cd ToorChat
sudo ./toorchat.py
Other cool CC111 projects:
You can ring my bell! Adventures in sub-GHz RF land...
adamsblog.apert...
Hacking fixed key remotes
andrewmohawk.co...
Hacking garage door remote controllers
v3gard.com/2014...
Find more Hak5 episodes at hak5.org and support us via our HakShop at hakshop.com
~-~~-~~~-~~-~
Please watch: "Bash Bunny Primer - Hak5 2225"
• Bash Bunny Primer - Ha...
~-~~-~~~-~~-~
____________________________________________
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community - where all hackers belong.
![Find Vulnerable Services & Hidden Info Using Google Dorks [Tutorial]](http://i.ytimg.com/vi/u_gOnwWEXiA/mqdefault.jpg)
YARD Stick One with the ToorChat on a WifiPineapple for a RF bridge on a freq like 433mhz could get you some serious range (and wall penetrating) wifi auditing. It could also provide a great safety net because it could evade rouge access point scans and wouldn't require a 3g/4g data connection. Put everything in a box with a decent capacity battery and toss it in the false ceiling of the bathroom and walk out.
This, of course, being that you are doing the penetration test with the permission or by the direction of the people that own the network.
+0150r exactly - which is why we're looking at just such a thing.
Fondle your dongle. Good stuff.
Love Mrs. Morse...she's so funny lol. When he said "fumble my dongle" I lost it too lol
"You may remember the calculators."
I'm confused... isn't HAK5 pitched at techies??!
Nice new hair :). Really love your vids. Love from Sweden
good enough! great ep
Hi Hak5,
Excellent video, I have a question with reference to that shown in this video: The programs only work with the Stick YARD One? I tried to test my HackRF One or Dongle generic only RX and apparently does not recognize.
Thank you and we hope more videos.
Shanon you are awesome :)
Im not sure if some one has mentioned this but some reason the video around your fingers is supper lossy. I know its really not a big deal but i thought my monitor was broken for a second because of how jagged they looked when you move. It must be the compression you use or the camera you guys use to capture your show.
LOL!!! 4:43 Not the first time she ever said that!
+Toms Chevelle He always tries to poke me with his antennas.... ;) - Shannon
Hak5 LOL! I bet he does... :) Thanks for the reply!.
+Hak5 LOL! @ 8:41 Darren is left to fondle his dongle... I don't even know where this is going from here...
I was really hoping for a demonstration. I have a dongle and my kali linux and parrot os linux laptop ready but I want some practice before I invest $100 in a yard stick one. I would also like to learn how to use transceivers to bring down drones over my personal property or as legal as I can as a learning project for the day when skynet, I mean starlink turns on us. I am actually being over half way serious with that.
Hi guys. Love your show and great work as always. I am curious if you guys can help with a question I have. I have a couple of Pi's and Pi 2's but as like with everyone else I have more projects then Pi's. Is there a way to do booting for a virtual Pi or Pi2 using QEMU or any other virtual environment? Also does it include maybe some use of the a virtual GPIO to include maybe a breadboard or other tools, led's etc.?
This would be nice to do before actually putting a physical system and can help speed up development and integration. Thanks again. Julez Dallas/Tx.
Yardstick + raspberry pi zero + LCD display + a couple of buttons... Hmmmm sounds like a lot of fun
you should do an indepth video on how to install ToorChat for those of us who dont know how to do it.
I am running the App Kali on my windows laptop and can't seem to detect the yardstick one. I just get an Error in reset():Exception('No dongle found. Please insert a RFCAT dongle.') yet the yardstick one is plugged in.
any advice?
My Win 10 does not recognise the device so therefore cannot connect to my Kali on VMWare....Any help much appreciated.
Awesome episode! Haking at it's finest!
"I like pandas"
Was that a hint to a device coming soon called "the panda" or something?
Crestoify: Oddly enough, there's apparently this French company called Comthings that has this Open Hardware/Software, battery/USB-powered SDR tool called the PandwaRF (used to be GollumRF) that's on preorder right now. It looks like a great iteration on the YARD Stick One concept. And beside being battery-powered, it also supports BLE connectivity for low-bandwidth applications. Doesn't seem very expensive, either. Seriously hoping it's not vaporware, though. Newish hardware projects can be volatile like that.
Mike Trieu That's so cool! thanks for sharing!
I wonder since this device can send and receive wireless RF signals, can it find and decrypt signals that output from rolling remote codes?
I love you guys, awesome video
I can not order from your shop am I not allowed coz i'm oversea
Okay I'm trying to use the yardstick with kali linux can someone explain to me in lamen terms what I have to from here?
Hi its possible to use yardstick one in vmware on windows???
When will The USB Rubber Ducky be available for purchase again?
As always,
Thanks!
+SnowFlakeDayZ Early next week!
What Distro is Shannon using ?
dat interlacing.
America, Canadas boxer shorts. 🇨🇦
"inexpensive" *cries in high school student*
Is there a tutorial on how to use the Yardstick One in a Windows environment? I currently have a Surfacebook i7 running vmware ubuntu 14.04 and no matter what I try the USB is not being recognized. Even when I am in Windows, when I plug the yardstick one in, Windows says the device is not recognized. Is that normal?
Did you ever figure this out. I have the same problem. Please share if you did. Thank you, Joe
rfcat sounds a lot like what I use to decode sdr signals: rtl_fm piped to multimon-ng.
... except 1 million times better!
can't u guys ship to other regions like India or parts of Asia
How about setting it up for Windows 7?
Too bad the IM-Me costs like $300-500 USD now. I'd love to have one to screw around with, but you just can't find them anywhere unless you go yardsale snooping for a few week.
GLaDproductions2000: That's the point of this device. It uses the same TI CC1111 chipset as the old IM-Me, but purpose-built for hackers (I suppose you could still fabricate your own cute pink case for it, if you're feeling nostalgic).
Mike Trieu Oh fancy! I may get one when I have some money to spare.
wow, that's some heavy video interlacing
Nice tumbnail!
expensive for such little parts
gamerpaddy: Yeah, unfortunately, GSG doesn't have the economies of scale to bring the price down to commercial toy levels yet, but for what it does, I'd say it's still tremendously great value. At least you don't have to fork out even more money for expensive software licenses.
Too right and they say inexpensive
Someones used to getting poked
Yardstick one + android device what do you get?
130€ :(
+Winsucker years ago you would have to pay more than 500€ for hardware like that
still redicously overpriced in regard of the used hardware components.
I don't know where they get inexpensive from over 100£ and they can't even put it in a case. I think 50£ max for this device.
Can the tootchat communications be encrypted?
+Forest Daniels yes!
Ey ... 360p :D
real men carry pink pager
Is "tack" an American thing. Everyone I know says hyphen. Not a criticism. . . just a question :)
+Eurisko Google it. ;) I'll give ya a hint - it's a military thing. - Shannon
Eurisko: Why waste two syllables when one will do? 😄
i spend way too much money on Ossmann
На него бы портапак как на хакрф
360p WHAT THE HELL!
+Android Hacker99 No we didn't. It's youtube's uploading. They render it on the site at the lowest quality and work up from there.
+Morpheus Stark Great, THANKS for pointing that out lol
LOW COST 200$ :'(
Americas hat ehh, or Canada's pants ;). Sorry
Did purple hair just say penetration testing instead of pen test. I think i'm in
GUYS INTERLACED FRAMES MAKE ME VOMIT! ITS 2015 GO PROGRESSIVE!!!
+Clayton Little We've discussed this issue on a previous episode. If you have 5 grand you can spare, please feel free to buy us a new mixer.
+Hak5 Would yall prefer the Blackmagic Studio or the Datavideo?
I love you guys, awesome video full of new information stuff and that girl is hot !!
I wonder why we cant use 360-365 370-375 mhz , if i cant audit it all i ain't buying it.
sec
Loose the girl