Pocket Science Lab Kit - Revision history

Stuffsyncbot: Automatic device update

2021-04-08T22:21:04Z

Automatic device update

← Older revision		Revision as of 22:21, 8 April 2021
Line 1:		Line 1:
	{{Device\|device_name=Pocket Science Lab Kit\|manufacturer=Verein\|link=https://pslab.io/\|image_link=https://i1.wp.com/pslab.io/wp-content/uploads/2018/10/20181021_165627.png?w=759&ssl=1\|description=USB powered hardware extension with a built-in Oscilloscope, Multimeter, Wave Generator, Logic Analyzer, Power Source\|technicalSpecification=https://pslab.io/specifications/\|supportedTechnologies=I2C, SPI, UART\|includedEquipment=1x development board, 1x micro USB cable, 1x micro USB to USB C adapter, 1x micro USB to USB A adapter\| elviscategory=IoT Development}}		{{Device\|device_name=Pocket Science Lab Kit\|manufacturer=Verein\|link=https://pslab.io/\|image_link=https://i1.wp.com/pslab.io/wp-content/uploads/2018/10/20181021_165627.png?w=759&ssl=1\|description=USB powered hardware extension with a built-in Oscilloscope, Multimeter, Wave Generator, Logic Analyzer, Power Source\|technicalSpecification=https://pslab.io/specifications/\|supportedTechnologies=I2C, SPI, UART\|includedEquipment=1x development board, 1x micro USB cable, 1x micro USB to USB C adapter, 1x micro USB to USB A adapter\|elviscategory=IoT Development}}

Stuffsyncbot: Automatic device update

2021-03-19T09:28:01Z

Automatic device update

Show changes

ALechner: update category to "Documentations"

2021-01-26T17:05:36Z

update category to "Documentations"

← Older revision		Revision as of 17:05, 26 January 2021
Line 115:		Line 115:
	* https://github.com/fossasia/pslab-desktop		* https://github.com/fossasia/pslab-desktop

	[[Category:~~Security Awareness~~]]		[[Category:Documentations]]

ALechner: fix typos

2020-11-27T15:19:03Z

fix typos

← Older revision		Revision as of 15:19, 27 November 2020
Line 7:		Line 7:
	== Description ==		== Description ==

	This board allows you to measure all kinds of things, assumed you have the right sensor, and it is supported. Basic connectors/sensors are ''USB, GPIO Connector, UART, Wi-Fi, Bluetooth, I2C'' and ''ICSP Programmer''. A full list of technical specifications can be found on the [https://pslab.io/wp-content/uploads/PSLab-Data-Sheet.pdf datasheet] as well as on the [https://pslab.io/ PS Lab website]. A built-in ''Oscilloscope, Power Source, Multimeter, Accelerometer, Sensors, Logic Analyzer'' and ''Wave Generator'' can be used right out of the box. A ''Temperature Sensor, Compass, Barometer'' and ''Lux Meter'' are not included and need to be bought separately.		This board allows you to measure all kinds of things, assumed you have the right sensor, and it is supported. Basic connectors / sensors are ''USB, GPIO Connector, UART, Wi-Fi, Bluetooth, I2C'' and ''ICSP Programmer''. A full list of technical specifications can be found on the [https://pslab.io/wp-content/uploads/PSLab-Data-Sheet.pdf datasheet] as well as on the [https://pslab.io/ PS Lab website]. A built-in ''Oscilloscope, Power Source, Multimeter, Accelerometer, Sensors, Logic Analyzer'' and ''Wave Generator'' can be used right out of the box. A ''Temperature Sensor, Compass, Barometer'' and ''Lux Meter'' are not included and need to be bought separately.

	=== Functionalities ===		=== Functionalities ===

	To control the PS Lab Kit an Android App and PC application are available. From the user-friendly interface a list of various functions can be selected. The functions are listed in the section described above. Each function can record the received input. Therefore, a Rec-Button will appear in the top right corner. The recording can be started by clicking on it and stopped by clicking it another time on it. The menu has a section called: ”Logged Data”. In this section the recording can be found and exported as ''.CSV'' file.		To control the PS Lab Kit an Android App and PC application are available. From the user-friendly interface a list of various functions can be selected. The functions are listed in the section described above. Each function can record the received input. Therefore, a Rec-Button will appear in the top right corner. The recording can be started by clicking on it and stopped by clicking it another time on it. The menu has a section called: ”Logged Data”. In this section the recording can be found and exported as ''.CSV'' file.


	<gallery mode=packed heights=400px>		<gallery mode=packed heights=400px>
Line 30:		Line 31:
	File:FR-04.jpg\|200px\|thumb\|none\|'''FR-04''': ''Rain Sensor''		File:FR-04.jpg\|200px\|thumb\|none\|'''FR-04''': ''Rain Sensor''
	</gallery>		</gallery>


	=== Wi-Fi ===		=== Wi-Fi ===
Line 38:		Line 40:
	The Pocket Science Lab Kit can be extended with such a Wi-Fi module. Normally an ESP8266 chip would be soldered to the back of the kit to create network connectivity between the board and the Android phone or PC. The documentation for this is currently not available.		The Pocket Science Lab Kit can be extended with such a Wi-Fi module. Normally an ESP8266 chip would be soldered to the back of the kit to create network connectivity between the board and the Android phone or PC. The documentation for this is currently not available.

	In the following section only the ''ESP8266 DevKitC V1'' is used to prove ~~the~~ security ~~of it~~.		In the following section only the ''ESP8266 DevKitC V1'' is used to prove its security.

	== Exploits ==		== Exploits ==
	According to the [https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=ESP8266 CVE Mitre] (''Common Vulnerabilities and Exposures'') the following four exploits are known for the ESP8266.		According to the [https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=ESP8266 CVE Mitre] (''Common Vulnerabilities and Exposures'') the following four exploits are known for the ESP8266:

	=== CVE-2019-12586 ===		=== CVE-2019-12586 ===
Line 61:		Line 63:
	== Attack ==		== Attack ==

	The vulnerability '''CVE-2019-12587''' was found in SDKs of ''ESP32'' and ''ESP8266'' and allowed an attacker to take control of the Wi-Fi device in an enterprise network. This was achieved by sending an EAP-Fail message in the last step during the connection establishment of the device and the access point. It was discovered that ESP32/ESP8266 devices update their ''Pairwise Master Key (PMK)'' only when they receive an EAP-Success message. By sending an EAP-Fail message to the target device before it can receive the EAP-Success, the device skips updating the PMK received during a normal EAP exchange (''EAP-PEAP, EAP-TTLS or EAP-TLS''). If the PMK is not updated the target device uses a zero PMK which allows an attacker to hijack the connection between the access point and the ~~target~~ target within radio range. Even in such a situation, the device normally accepts the EAPoL 4-Way handshake which in turn establishes a session key based on this PMK.		The vulnerability '''CVE-2019-12587''' was found in SDKs of ''ESP32'' and ''ESP8266'' and allowed an attacker to take control of the Wi-Fi device in an enterprise network. This was achieved by sending an EAP-Fail message in the last step during the connection establishment of the device and the access point. It was discovered that ESP32/ESP8266 devices update their ''Pairwise Master Key (PMK)'' only when they receive an EAP-Success message. By sending an EAP-Fail message to the target device before it can receive the EAP-Success, the device skips updating the PMK received during a normal EAP exchange (''EAP-PEAP, EAP-TTLS or EAP-TLS''). If the PMK is not updated the target device uses a zero PMK which allows an attacker to hijack the connection between the access point and the target within radio range. Even in such a situation, the device normally accepts the EAPoL 4-Way handshake which in turn establishes a session key based on this PMK.

	=== Scenario ===		=== Scenario ===
Line 86:		Line 88:


	The highlighted packet ('''Failure''') is sent by the attacker. A generated PMK (or pre-shared key) equal to zero is sent from the attacker in ''Message 1''. The client normally responds with message 2 and 4 during the EaPoL handshake. If a Wi-Fi device is not vulnerable it simply ignores such failure messages and responds only to valid ''Message 1'' from the real access point.		The highlighted packet ('''Failure''') is sent by the attacker. A generated PMK (or pre-shared key) equal to zero is sent from the attacker in ''Message 1''. The client normally responds with message 2 and 4 during the EaPoL handshake. If a Wi-Fi device is not vulnerable it simply ignores such failure messages and responds only to a valid ''Message 1'' from the real access point.

	=== Impact ===		=== Impact ===

	Attackers can exploit this vulnerability to hijack ESP32/ESP8266 Wi-Fi clients connected to enterprise network without even knowing anything about username, password or certificates used during the enterprise keys exchanging methods (EAP-PEAP, EAP-TTLS or EAP-TLS). This allows an attackers in radio range to replay, decrypt, or spoof frames via a rogue access point~~, thus facilitating stealing of session~~ keys/ usernames/passwords if ~~communications betwen~~ ESP an AP ~~are~~ not using TLS. ~~This practically means that unpatched ESP devices are more secure by actually using just WPA2 Personal.~~		Attackers can exploit this vulnerability to hijack ESP32/ESP8266 Wi-Fi clients connected to enterprise network without even knowing anything about username, password or certificates used during the enterprise keys exchanging methods (EAP-PEAP, EAP-TTLS or EAP-TLS). This allows an attackers in radio range to replay, decrypt, or spoof frames via a rogue access point. Session keys or usernames/passwords can be stolen if the communication between ESP and AP is not using TLS. It's important to mention that attackers can also exploit '''CVE-2019-12586''' and '''CVE-2019-12588''' to force both ESP32 and ESP8266 to crash, which reinitialise the PMK to zero again.
	It's important to mention that attackers can also exploit CVE-2019-12586 and CVE-2019-12588 to force both ESP32 and ESP8266 to crash, which reinitialise the PMK to zero again.

	=== Patches ===		=== Patches ===
Line 101:		Line 102:
	* Arduino-ESP32 Stable Release 1.0.3 RC3 (5 September, 2019)		* Arduino-ESP32 Stable Release 1.0.3 RC3 (5 September, 2019)
	* Arduino-ESP32 Development Master (August 20, 2019)		* Arduino-ESP32 Development Master (August 20, 2019)


	== Used Hardware ==		== Used Hardware ==

ALechner: finalize submission

2020-11-27T15:08:40Z

finalize submission

← Older revision		Revision as of 15:08, 27 November 2020
Line 32:		Line 32:

	=== Wi-Fi ===		=== Wi-Fi ===
	[[File:ESP-WROOM-02U.png\|thumb~~\|left~~\|163px\|\|ESP8266 DevKitC V1]]		[[File:ESP-WROOM-02U.png\|thumb\|163px\|\|ESP8266 DevKitC V1]]

	ESP8266-DevKitC is a small-sized ESP8266-based development board produced by Espressif. All the I/O pins of the module are broken out into the female pin headers on both sides of the board for easy interfacing. Developers can connect these pins to peripherals as needed.		ESP8266-DevKitC is a small-sized ESP8266-based development board produced by Espressif. All the I/O pins of the module are broken out into the female pin headers on both sides of the board for easy interfacing. Developers can connect these pins to peripherals as needed.

	The Pocket Science Lab Kit can be extended with such a Wi-Fi module. Normally an ESP8266 chip would be soldered to the back of the kit to create network connectivity between the board and the Android phone or PC. The documentation for this is currently not available.		The Pocket Science Lab Kit can be extended with such a Wi-Fi module. Normally an ESP8266 chip would be soldered to the back of the kit to create network connectivity between the board and the Android phone or PC. The documentation for this is currently not available.

	~~== Use Cases ==~~		In the following section only the ''ESP8266 DevKitC V1'' is used to prove the security of it.

	~~The~~ following ~~list consists~~ of ~~some basic use cases of the kit.~~

	~~=== Multimeter ===~~

	~~Multimeter text.~~

	~~=== Oscilloscope ===~~

	~~Oscilliscope text~~.

	== Exploits ==		== Exploits ==
Line 75:		Line 65:
	=== Scenario ===		=== Scenario ===

	[[File:Zero pmk diagram.png\|800px~~\|center~~]]		[[File:Zero pmk diagram.png\|800px]]

			With the [https://github.com/Matheus-Garbelini/esp32_esp8266_attacks Proof of Concept tool] this vulnerability can be recreated.

			'''Change the network interface'''

			''The network interface must be changed to match the Wi-Fi interface on your machine.''
			# nano hostapd.conf

			''Stop the network manager to prevent unwanted behavior.''
			# sudo systemctl stop NetworkManager.service
			# cd hostapd-2.8_binary
			# ./run_zero_pmk_EAP.sh

			[[File:Run zero pmk EAP.png]]

	=== Wireshark ===		=== Wireshark ===

			[[File:Wireshark.png]]


			The highlighted packet ('''Failure''') is sent by the attacker. A generated PMK (or pre-shared key) equal to zero is sent from the attacker in ''Message 1''. The client normally responds with message 2 and 4 during the EaPoL handshake. If a Wi-Fi device is not vulnerable it simply ignores such failure messages and responds only to valid ''Message 1'' from the real access point.

	=== Impact ===		=== Impact ===

			Attackers can exploit this vulnerability to hijack ESP32/ESP8266 Wi-Fi clients connected to enterprise network without even knowing anything about username, password or certificates used during the enterprise keys exchanging methods (EAP-PEAP, EAP-TTLS or EAP-TLS). This allows an attackers in radio range to replay, decrypt, or spoof frames via a rogue access point, thus facilitating stealing of session keys/ usernames/passwords if communications betwen ESP an AP are not using TLS. This practically means that unpatched ESP devices are more secure by actually using just WPA2 Personal.
			It's important to mention that attackers can also exploit CVE-2019-12586 and CVE-2019-12588 to force both ESP32 and ESP8266 to crash, which reinitialise the PMK to zero again.

	=== Patches ===		=== Patches ===

			Espressif has fixed these problems and committed patches for the exploits described above. It is recommended to use the RTOS SDK instead of the NONOS SDK because it has a lot of unpatched vulnerabilities. The security patches below can be used to fix the vulnerability described before.

			* ESP32 ESP-IDF Stable Release 3.3 (5 September, 2019)
			* ESP32 ESP-IDF Development Master (30 May, 2019)
			* Arduino-ESP32 Stable Release 1.0.3 RC3 (5 September, 2019)
			* Arduino-ESP32 Development Master (August 20, 2019)


	== Used Hardware ==		== Used Hardware ==

ALechner: add vulnerability description

2020-11-27T14:09:03Z

add vulnerability description

← Older revision		Revision as of 14:09, 27 November 2020
Line 15:		Line 15:
	<gallery mode=packed heights=400px>		<gallery mode=packed heights=400px>
	File:View instrument panel.png\|200px\|thumb\|none\|'''Instrument View'''		File:View instrument panel.png\|200px\|thumb\|none\|'''Instrument View'''
			File:Instrument oscilloscope channel view.png\|200px\|thumb\|none\|'''Oscilloscope'''
	File:Instrument multi meter view.png\|200px\|thumb\|none\|'''Multimeter'''		File:Instrument multi meter view.png\|200px\|thumb\|none\|'''Multimeter'''
	~~File:Instrument oscilloscope channel view.png\|200px\|thumb\|none\|'''Oscilloscope'''~~
	</gallery>		</gallery>

Line 51:		Line 51:

	== Exploits ==		== Exploits ==
			According to the [https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=ESP8266 CVE Mitre] (''Common Vulnerabilities and Exposures'') the following four exploits are known for the ESP8266.

	=== CVE-2019-12586 ===		=== CVE-2019-12586 ===

	The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266-		The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266-NONOS-SDK 2.2.0 through 3.1.0 processes EAP Success messages before any EAP method completion or failure, which allows attackers in radio range to cause a denial of service (crash) via a crafted message.
	NONOS-SDK 2.2.0 through 3.1.0 processes EAP Success messages before any EAP
	method completion or failure, which allows attackers in radio range to cause a denial
	of service (crash) via a crafted message.

	=== CVE-2019-12588 ===		=== CVE-2019-12588 ===

	The client 802.11 mac implementation in Espressif ESP8266-NONOS-SDK 2.2.0 through		The client 802.11 mac implementation in Espressif ESP8266-NONOS-SDK 2.2.0 through 3.1.0 does not validate correctly the RSN AuthKey suite list count in beacon frames, probe responses, and association responses, which allows attackers in radio range to cause a denial of service (crash) via a crafted message.
	3.1.0 does not validate correctly the RSN AuthKey suite list count in beacon frames,
	probe responses, and association responses, which allows attackers in radio range to
	cause a denial of service (crash) via a crafted message.

	=== CVE-2019-12587 ===		=== CVE-2019-12587 ===

	The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266-		The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266-NONOS-SDK 2.2.0 through 3.1.0 allows the installation of a zero Pairwise Master Key (PMK) after the completion of any EAP authentication method, which allows attackers in radio range to replay, decrypt, or spoof frames via a rogue access point.
	NONOS-SDK 2.2.0 through 3.1.0 allows the installation of a zero Pairwise Master Key
	(PMK) after the completion of any EAP authentication method, which allows ~~attack-~~
	~~ers~~ in radio range to replay, decrypt, or spoof frames via a rogue access point.

	=== CVE-2020-12638 ===		=== CVE-2020-12638 ===

	An encryption-bypass issue was discovered on Espressif ESP-IDF devices through		An encryption-bypass issue was discovered on Espressif ESP-IDF devices through 4.2, ESP8266-NONOS-SDK devices through 3.0.3, and ESP8266-RTOS-SDK devices through 3.3. Broadcasting forged beacon frames forces a device to change its authentication mode to OPEN, effectively disabling its 802.11 encryption.
	4.2, ESP8266-NONOS-SDK devices through 3.0.3, and ESP8266-RTOS-SDK devices
	through 3.3. Broadcasting forged beacon frames forces a device to change its ~~authen-~~
	~~tication~~ mode to OPEN, effectively disabling its 802.11 encryption.

	== Attack ==		== Attack ==

	~~===~~ CVE-2019-12587 ===		The vulnerability '''CVE-2019-12587''' was found in SDKs of ''ESP32'' and ''ESP8266'' and allowed an attacker to take control of the Wi-Fi device in an enterprise network. This was achieved by sending an EAP-Fail message in the last step during the connection establishment of the device and the access point. It was discovered that ESP32/ESP8266 devices update their ''Pairwise Master Key (PMK)'' only when they receive an EAP-Success message. By sending an EAP-Fail message to the target device before it can receive the EAP-Success, the device skips updating the PMK received during a normal EAP exchange (''EAP-PEAP, EAP-TTLS or EAP-TLS''). If the PMK is not updated the target device uses a zero PMK which allows an attacker to hijack the connection between the access point and the target target within radio range. Even in such a situation, the device normally accepts the EAPoL 4-Way handshake which in turn establishes a session key based on this PMK.

			=== Scenario ===

			[[File:Zero pmk diagram.png\|800px\|center]]

			=== Wireshark ===

			=== Impact ===

			=== Patches ===

	== Used Hardware ==		== Used Hardware ==

ALechner: finalize structure, add images, add exploits, add attack

2020-11-27T11:32:01Z

finalize structure, add images, add exploits, add attack

← Older revision		Revision as of 11:32, 27 November 2020
Line 1:		Line 1:
	[[File:PSLab v5 top.png\|thumb\|right\|400px\|\|Pocket Science Lab Kit Top View]]		[[File:PSLab v5 top.png\|thumb\|right\|400px\|\|Pocket Science Lab Kit: ''Top View'']]

	== Summary ==		== Summary ==

	The Pocket Science Lab Kit is a small USB-based hardware extension for an Android device or PC, which allows the use of different instruments / functions that are already integrated in the board or can be expanded via external sensors. It is aimed at everyone whether teacher, pupil, hobbyist, student, professor or scientist. The name Pocket Science Lab says it all. The user has a small scientific laboratory in the size of a pocket. The aim of the Pocket Science Lab project is to perceive one's environment better and to digitize the analog world.		The [https://pslab.io/ Pocket Science Lab Kit] is a small USB-based hardware extension for an [https://play.google.com/store/apps/details?id=io.pslab Android device] or [https://github.com/fossasia/pslab-desktop PC], which allows the use of different instruments / functions that are already integrated in the board or can be expanded via external [https://pslab.io/sensors/ sensors]. It is aimed at everyone whether teacher, pupil, hobbyist, student, professor or scientist. The name Pocket Science Lab says it all. The user has a small scientific laboratory in the size of a pocket. The aim of the Pocket Science Lab project is to perceive one's environment better and to digitize the analog world.

	== Description ==		== Description ==
	~~[[File:ESP-WROOM-02U.png\|thumb\|right\|163px\|\|ESP8266 DevKitC V1]]~~

	This board allows you measure all kinds of things, assumed you have the right sensor and it is supported. Basic connectors/sensors are USB, GPIO Connector, UART,Wi-Fi, Bluetooth, I2C and ICSP Programmer. A full list of ~~the~~ technical specifications can be found in the ~~data sheet A~~ as well as on the PS Lab website. A built-in Oscilloscope, Power Source, Multimeter, Accelerometer, Sensors, Logic Analyzer and Wave Generator can be used right out of the box. A Temperature Sensor, Compass, Barometer and Lux Meter need ~~extra sensors~~.		This board allows you to measure all kinds of things, assumed you have the right sensor, and it is supported. Basic connectors/sensors are ''USB, GPIO Connector, UART, Wi-Fi, Bluetooth, I2C'' and ''ICSP Programmer''. A full list of technical specifications can be found on the [https://pslab.io/wp-content/uploads/PSLab-Data-Sheet.pdf datasheet] as well as on the [https://pslab.io/ PS Lab website]. A built-in ''Oscilloscope, Power Source, Multimeter, Accelerometer, Sensors, Logic Analyzer'' and ''Wave Generator'' can be used right out of the box. A ''Temperature Sensor, Compass, Barometer'' and ''Lux Meter'' are not included and need to be bought separately.

	=== Functionalities ===		=== Functionalities ===

	~~The~~ application ~~has a~~ user friendly interface~~. From~~ a list of various functions can be		To control the PS Lab Kit an Android App and PC application are available. From the user-friendly interface a list of various functions can be selected. The functions are listed in the section described above. Each function can record the received input. Therefore, a Rec-Button will appear in the top right corner. The recording can be started by clicking on it and stopped by clicking it another time on it. The menu has a section called: ”Logged Data”. In this section the recording can be found and exported as ''.CSV'' file.
	selected. The ~~structure is more or less the same for the~~ functions~~. In~~ the ~~center is either~~
	~~a graph or any other visual representation. On the right hand side is a panel where~~
	~~parameters and triggers can be set~~. Each function ~~has the ability to~~ record the received
	input. Therefore a Rec-Button will appear on the top right corner. The recording can
	be started by clicking on it and stopped by clicking another time on it. The menu has
	a section ~~with~~ ”Logged Data”. In this section the recording can be found and exported
	as .~~csv~~ file.

	~~The following table 2.1 will cover all functionalities of the Android application in com-~~		<gallery mode=packed heights=400px>
	~~bination with the board. Some functions are available without additional hardware~~. In		File:View instrument panel.png\|200px\|thumb\|none\|'''Instrument View'''
	~~the first half of the table are functions listed which do not need extra hardware~~. ~~The~~		File:Instrument multi meter view.png\|200px\|thumb\|none\|'''Multimeter'''
	~~second half requires additional hardware to make use of the capabilities from the board~~.		File:Instrument oscilloscope channel view.png\|200px\|thumb\|none\|'''Oscilloscope'''
	~~Disappointing is the fact that not all of the listed functionalities are available on the~~		</gallery>
	~~desktop or android version and are not even supported~~/~~implemented in the firmware.~~
	~~Only these functions are available: Oscilloscope, Multimeter, Logical Analyzer, Wave~~
	~~Generator, Power Source and Robotic Arm Controller.~~

	=== Sensors ===		=== Sensors ===

	Notable sensors are the temperature sensor, gas sensor and		Notable sensors are the ''temperature sensor, gas sensor'' and ''moisture sensor''.
	moisture sensor. ~~By adding a temperature sensor 2.1 to your~~
	PS Lab Kit ~~you can for example always check the temperature~~		Currently the functionalities of these sensors is unavailable for the PS Lab Kit. The Pocket Science Lab Project provides a list of compatible [https://pslab.io/sensors/ sensors].
	of ~~your greenhouse and create history of the measured data~~.
	~~This helps you to check if the cooling~~/~~heating is working prop-~~		<gallery mode=packed heights=250px>
	~~erly. With a gas sensor 2.2 you can create a smoke detector~~		File:LM35.jpg\|200px\|thumb\|none\|'''LM35''': ''Temperature Sensor''
	~~which can alert you if there is smoke development or a object~~		File:MQ135.jpg\|200px\|thumb\|none\|'''MQ135''': ''Gas Sensor''
	~~is burning~~. ~~A moisture sensor 2~~.~~3 can close your windows if its~~		File:FR-04.jpg\|200px\|thumb\|none\|'''FR-04''': ''Rain Sensor''
	~~raining outside~~.		</gallery>

	=== Wi-Fi ===		=== Wi-Fi ===
			[[File:ESP-WROOM-02U.png\|thumb\|left\|163px\|\|ESP8266 DevKitC V1]]

			ESP8266-DevKitC is a small-sized ESP8266-based development board produced by Espressif. All the I/O pins of the module are broken out into the female pin headers on both sides of the board for easy interfacing. Developers can connect these pins to peripherals as needed.

	The ~~ESP-WROOM-02U is~~ a Wi-Fi module ~~working on~~ the ~~2.4~~		The Pocket Science Lab Kit can be extended with such a Wi-Fi module. Normally an ESP8266 chip would be soldered to the back of the kit to create network connectivity between the board and the Android phone or PC. The documentation for this is currently not available.
	~~GHz range. The female header pins allow a easy connection~~ to
	the ~~I/O ports. .~~..

	== Use Cases ==		== Use Cases ==
Line 59:		Line 49:

	Oscilliscope text.		Oscilliscope text.

			== Exploits ==

			=== CVE-2019-12586 ===

			The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266-
			NONOS-SDK 2.2.0 through 3.1.0 processes EAP Success messages before any EAP
			method completion or failure, which allows attackers in radio range to cause a denial
			of service (crash) via a crafted message.

			=== CVE-2019-12588 ===

			The client 802.11 mac implementation in Espressif ESP8266-NONOS-SDK 2.2.0 through
			3.1.0 does not validate correctly the RSN AuthKey suite list count in beacon frames,
			probe responses, and association responses, which allows attackers in radio range to
			cause a denial of service (crash) via a crafted message.

			=== CVE-2019-12587 ===

			The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266-
			NONOS-SDK 2.2.0 through 3.1.0 allows the installation of a zero Pairwise Master Key
			(PMK) after the completion of any EAP authentication method, which allows attack-
			ers in radio range to replay, decrypt, or spoof frames via a rogue access point.

			=== CVE-2020-12638 ===

			An encryption-bypass issue was discovered on Espressif ESP-IDF devices through
			4.2, ESP8266-NONOS-SDK devices through 3.0.3, and ESP8266-RTOS-SDK devices
			through 3.3. Broadcasting forged beacon frames forces a device to change its authen-
			tication mode to OPEN, effectively disabling its 802.11 encryption.

			== Attack ==

			=== CVE-2019-12587 ===

	== Used Hardware ==		== Used Hardware ==

ALechner: add dummy text; image positioning

2020-11-23T20:07:00Z

add dummy text; image positioning

@@ Line 1: / Line 1: @@
 == Summary ==
@@ Line 4: / Line 6: @@
 == Description ==
-[[File:PSLab v5 top.png|400px||Pocket Science Lab Kit Top View]]
+This board allows you measure all kinds of things, assumed you have the right sensor and it is supported. Basic connectors/sensors are USB, GPIO Connector, UART,Wi-Fi, Bluetooth, I2C and ICSP Programmer. A full list of the technical specifications can be found in the data sheet A as well as on the PS Lab website. A built-in Oscilloscope, Power Source, Multimeter, Accelerometer, Sensors, Logic Analyzer and Wave Generator can be used right out of the box. A Temperature Sensor, Compass, Barometer and Lux Meter need extra sensors.
 === Functionalities ===
 === Sensors ===
 === Wi-Fi ===
 == Use Cases ==
@@ Line 19: / Line 53: @@
 === Multimeter ===
 === Oscilloscope ===
 == Used Hardware ==

ALechner: add a basic structure

2020-11-23T18:07:59Z

add a basic structure

← Older revision		Revision as of 18:07, 23 November 2020
Line 1:		Line 1:
	== Summary ==		== Summary ==
	~~The PS Lab Kit board can interact with the world around us. For connectivity and data transfer the ESP8266 Wi-Fi module is used.~~

	~~== Use Cases==~~		The Pocket Science Lab Kit is a small USB-based hardware extension for an Android device or PC, which allows the use of different instruments / functions that are already integrated in the board or can be expanded via external sensors. It is aimed at everyone whether teacher, pupil, hobbyist, student, professor or scientist. The name Pocket Science Lab says it all. The user has a small scientific laboratory in the size of a pocket. The aim of the Pocket Science Lab project is to perceive one's environment better and to digitize the analog world.

			== Description ==

	== ~~Description~~ ==		[[File:PSLab v5 top.png\|400px\|\|Pocket Science Lab Kit Top View]]
			[[File:ESP-WROOM-02U.png\|400px\|\|ESP8266 DevKitC V1]]

			=== Functionalities ===

			=== Sensors ===

			=== Wi-Fi ===

			== Use Cases ==

			The following list consists of some basic use cases of the kit.

			=== Multimeter ===

			=== Oscilloscope ===

	== Used Hardware ==		== Used Hardware ==

ALechner: initial documentation for pocket science lab kit

2020-11-23T15:22:42Z

initial documentation for pocket science lab kit

New page

== Summary ==
The PS Lab Kit board can interact with the world around us. For connectivity and data transfer the ESP8266 Wi-Fi module is used.

== Use Cases==

== Description ==

== Used Hardware ==

[[Pocket Science Lab Dev Board]]

== References ==

* https://pslab.io/
* https://pslab.io/wp-content/uploads/PSLab-Data-Sheet.pdf
* https://github.com/fossasia/pslab-firmware
* https://play.google.com/store/apps/details?id=io.pslab
* https://github.com/fossasia/pslab-desktop

[[Category:Security Awareness]]