Bringing Software Defined Radio to the Penetration Testing Community

Explore the world of wireless security assessments in this 37-minute Black Hat conference talk. Discover how Software Defined Radio (SDR) can be leveraged for penetration testing of various wireless devices beyond WiFi, including smartmeters, wearable devices, and Internet of Things (IoT) gadgets. Learn about the security and privacy challenges that arise when developers without deep security backgrounds create these devices. Understand the limitations of using dedicated hardware components for each device type, and see how the speakers developed an innovative solution: an easy-to-use wireless monitor/injector tool based on SDR, GNU Radio, and the scapy framework. Gain insights into how this tool enables effective penetration testing capabilities for security auditors, even those with limited knowledge of radio communications, opening up new possibilities for comprehensive wireless security assessments.