ESPwn32: Hacking with ESP32 System-on-Chips - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2023

ESPwn32: Hacking with ESP32 System-on-Chips

Romain Cayre
  • Fonction : Auteur
  • PersonId : 1276462
Damien Cauquil
  • Fonction : Auteur
  • PersonId : 1276463
Aurélien Francillon

Résumé

In this paper, we analyze the ESP32 from a wireless security perspective. We reverse engineer the hardware and software components dedicated to Bluetooth Low Energy (BLE) on the ESP32 and ANT protocol on Nordic Semiconductors' nRF chips. Exploiting this, we then implement multiple attacks on the repurposed ESP32 targeting various wireless protocols, including ones not natively supported by the chip. We make link-layer attacks on BLE (fuzzing, jamming) and cross-protocol injections, with only software modifications. We also attack proprietary protocols on commercial devices like keyboards and ANT-based sports monitoring devices. Finally, we show the ESP32 can be repurposed to interact with Zigbee or Thread devices. In summary, we show that accessing low-level, non-documented features of the ESP32 can allow, possibly compromised, devices to mount attacks across many IoT devices.
Fichier principal
Vignette du fichier
ESP32WOOT_CameraReady.pdf (3.24 Mo) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04183794 , version 1 (21-08-2023)

Identifiants

Citer

Romain Cayre, Damien Cauquil, Aurélien Francillon. ESPwn32: Hacking with ESP32 System-on-Chips. WOOT 2023, 17th IEEE Workshop on Offensive Technologies, co-located with IEEE S&P 2023, IEEE, May 2023, San Francisco, United States. ⟨10.1109/SPW59333.2023.00033⟩. ⟨hal-04183794⟩
23 Consultations
32 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More