ZigBee Sniffing

Summary

In this project the communication between a Raspberry Pi with a Raspbee module and a Philips Hue light bulb was sniffed with the Atmel RZ Raven USB stick. The Transport Key was obtained and therefore the on/off commands sent from the Raspberry Pi to the light bulb could be decrypted.

Requirements

• Operating system of host: Windows 10
  • Software:
    • SD Card Formatter 5.0 for SD/SDHC/SDXC
    • Win32 Disk Imager
• Operating system of attacking host: Kali Linux 64 Bit
  • Version 2018.2
• Packages: KillerBee
• Operating system of Raspberry Pi: RaspBee Gateway SD card image Raspbian Jessi RaspBee (Stable)
  • Version 01-2017

Authors

• Daniel Tod
• Luca Strobl
• Dominik Mayer
• Jean Castillo

Results

• Sniffed Transport Key
• Decrypted commands
• Detailed documentation about the ZigBee protocol and the conducted project

Used Hardware

• Raspberry Pi 3, Model B+, WLAN, BT
• Kingston 8GB micro SD-HC class 4
• RaspBee premium, Erweiterungsplatine mit Funkmodul für Raspberry Pi
• Philips Hue White and Color Ambiance Single LED-Bulb E27 10W
• AVR RZUSBSTICK
• AVR Dragon programming board
• IDC cable
• USB 2.0 cable a-male to b-male
• Windows 10 host
• Kali Linux host
• USB stick with at least 4 gigabyte of memory
• USB mouse and keyboard
• external monitor
• HDMI cable

See the documentation for detailed information of the used hardware such as images and links.

Courses

• Einführendes Wahlfachprojekt (2018)