Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 31 guests and 2 members online
EH-Net Donations

Enter Amount:
$

Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow Anyone have experiance with carwhisperer?
Ethical Hacker Community Forums
January 07, 2009, 08:37:19 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2-Day Ethical Hacking Conference with MS Blue Hats Oct 31 - Nov 1. Tickets Only $100! www.chicagocon.com/content/view/103/51/
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Anyone have experiance with carwhisperer?  (Read 3619 times)
0 Members and 1 Guest are viewing this topic.
dalepearson
Full Member
***
Offline Offline

Posts: 163


View Profile
« on: June 28, 2008, 06:58:27 AM »

I have been messing about this with software in my lab, but I am really fairly limited into my knowledge of bluetooth related vulnerabilities. I have messed with bluesnarfer and bluebugger in the past with success in the lab, but a non security related issue has me stuck and maybe you guys can help.

Admitedly I have not had much time to google, but when using carwhisperer you are required to use an input file and this is some form of audio .RAW file, then output then will also be a .RAW file.

My question is, what tool can be used to create and playback these audio .RAW files?

If know one has experiance, I will post an answer when I find some spare time to do some further hunting.

Thanks in advance.
Dale
Logged

dalepearson
Full Member
***
Offline Offline

Posts: 163


View Profile
« Reply #1 on: June 28, 2008, 07:09:38 AM »

Heh,

I just very quickly had a look around before getting back to writing this report (having to work at the weekend sucks). I probably wont have time to try it this weekend but something called SOX is used apparently:

Sox is needed to listen to the raw PCM output from the headset
sox -t raw -r 8000 -c 1 -s -w <recorded .raw file> -t ossdsp /dev/dsp
Sox can also change the raw PCM to .wav
sox -t raw -r 8000 -c 1 -s -w <recorded .raw file> -t wav -r 44100 -c 2 out.wav
Make your own message to send:
sox -t wav -r 44100 -c 2 <your .wav-file> -t raw -r 8000 -c 1 -s -w message.raw
Logged

jason
Sr. Member
****
Offline Offline

Posts: 346


Aut Viam Inveniam Aut Faciam


View Profile WWW
« Reply #2 on: June 28, 2008, 08:37:09 AM »

You can find info on sox here

http://sox.sourceforge.net/

It's handy for all sorts of odd audio formats
Logged
dalepearson
Full Member
***
Offline Offline

Posts: 163


View Profile
« Reply #3 on: June 28, 2008, 09:45:14 AM »

Thanks Jason,

I will give it a read and try it out.
Logged

dalepearson
Full Member
***
Offline Offline

Posts: 163


View Profile
« Reply #4 on: August 01, 2008, 07:16:03 AM »

Just a quick bump on this thread.
Has anyone proven this one out yet on here.

On screen I am getting input and output, however I am not hearing anything being injected or output. Info from anyone who has actually got this working would be appreciated.

Quote
00:03:89:61:AE:C7
Sh: ./carwhisperer:  is a directory

Input Filename : /home/martin/message.wav
Sample Size: 8-bits
Same Encoding: unsigned
Channels: 1
Sample Rate: 11025

Time 00:20:45 [00:00:00] of 00:20:45 ( 100.0%) Output Buffer: 981.64K

Done
Logged

dalepearson
Full Member
***
Offline Offline

Posts: 163


View Profile
« Reply #5 on: August 29, 2008, 10:36:48 AM »

I purchased a Sony Ericsson HCB-30 last week, and connected it up to a car battery.
Sadly same sort of results as above, nothing appears to be injected, and nothing recorded.

Seems so little information on this exploit actually working, I might have to hang up my bluetooth gloves on this one. A shame as would have been interesting.
Logged

Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.7 | SMF © 2006-2008, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.052 seconds with 23 queries.
 
Sponsors

cwnp_moto__120x90.gif

Polls
How many security events including conferences and training do you attend a year:
 
Support EH-Net


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2009 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.