Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can Gattacker send LTK encrypted command to a device? #18

Open
jimmyzero3 opened this issue Apr 10, 2018 · 1 comment
Open

Can Gattacker send LTK encrypted command to a device? #18

jimmyzero3 opened this issue Apr 10, 2018 · 1 comment

Comments

@jimmyzero3
Copy link

Hi, I was trying to hack my BLE key card and I came across this great tool, but there're some questions I'd like to ask.

The key card connects to a smart phone with LTK encryption (Which I can crack with Crackle). Because the private key stored in the card regenerates every time the card is connected to a new phone, I will have to hack it without actually pairing with it.

So, the idea I came up is to spoof the real phone connected to the key card and try to get its key.
I think it was possible to achieve the spoofing part of my plan with Gattacker, but the problem is they uses LTK to encrypt their communications.
Is Gattacker available to send LTK encrypted packet if I know the LTK?

@decidedlygray
Copy link

Unfortunately, no it is not currently compatible with link layer encryption - https://github.com/securing/gattacker/wiki/FAQ#does-it-work-against-encrypted-connections

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants