BLE Device Assessment: From Start to Finish

Presented at ShellCon 2021 Virtual, Oct. 8, 2021, 2 p.m. (55 minutes)

In this talk, we'll walk through a complete Bluetooth Low Energy security assessment by focusing our attention on a single device - from start to finish. Along the way, we're going to discuss how to select interesting targets, how to spot vulnerabilities, and some reporting practices that might make your life a little easier. We'll also cover basic tooling and implementation strategies, and I'll share a few insights about building skillsets and how to approach your first BLE client engagement.

Presenters:

• Maxine Filcher / Freqy   as Freqy
  Freqy is a security consultant and researcher with a particular interest in wireless technologies like BLE, ZigBee, Wi-Fi, etc. She has spent the past two years working with companies to help improve the wireless security of devices found in millions of homes and businesses.

Links:

• https://shellcon.io/talks/2021/ble-device-assessment/

Similar Presentations:

• Still Hacking Anyway (SHA2017) / Hack-a-ble: Hacking BLE Smart Devices
• DEF CON 24 (2016) / Picking Bluetooth Low Energy Locks from a Quarter Mile Away
• DEF CON 26 (2018) / You'd better secure your BLE devices or we'll kick your butts !