.

Anyone have experiance with carwhisperer?

<<

dalepearson

Sr. Member
Sr. Member

Posts: 357

Joined: Thu Nov 09, 2006 10:03 am

Post Sat Jun 28, 2008 6:58 am

Anyone have experiance with carwhisperer?

I have been messing about this with software in my lab, but I am really fairly limited into my knowledge of bluetooth related vulnerabilities. I have messed with bluesnarfer and bluebugger in the past with success in the lab, but a non security related issue has me stuck and maybe you guys can help.

Admitedly I have not had much time to google, but when using carwhisperer you are required to use an input file and this is some form of audio .RAW file, then output then will also be a .RAW file.

My question is, what tool can be used to create and playback these audio .RAW files?

If know one has experiance, I will post an answer when I find some spare time to do some further hunting.

Thanks in advance.
Dale
<<

dalepearson

Sr. Member
Sr. Member

Posts: 357

Joined: Thu Nov 09, 2006 10:03 am

Post Sat Jun 28, 2008 7:09 am

Re: Anyone have experiance with carwhisperer?

Heh,

I just very quickly had a look around before getting back to writing this report (having to work at the weekend sucks). I probably wont have time to try it this weekend but something called SOX is used apparently:

Sox is needed to listen to the raw PCM output from the headset
sox -t raw -r 8000 -c 1 -s -w <recorded .raw file> -t ossdsp /dev/dsp
Sox can also change the raw PCM to .wav
sox -t raw -r 8000 -c 1 -s -w <recorded .raw file> -t wav -r 44100 -c 2 out.wav
Make your own message to send:
sox -t wav -r 44100 -c 2 <your .wav-file> -t raw -r 8000 -c 1 -s -w message.raw
<<

jason

User avatar

Hero Member
Hero Member

Posts: 1013

Joined: Sat Jun 21, 2008 6:23 pm

Location: USA

Post Sat Jun 28, 2008 8:37 am

Re: Anyone have experiance with carwhisperer?

You can find info on sox here

http://sox.sourceforge.net/

It's handy for all sorts of odd audio formats
<<

dalepearson

Sr. Member
Sr. Member

Posts: 357

Joined: Thu Nov 09, 2006 10:03 am

Post Sat Jun 28, 2008 9:45 am

Re: Anyone have experiance with carwhisperer?

Thanks Jason,

I will give it a read and try it out.
<<

dalepearson

Sr. Member
Sr. Member

Posts: 357

Joined: Thu Nov 09, 2006 10:03 am

Post Fri Aug 01, 2008 7:16 am

Re: Anyone have experiance with carwhisperer?

Just a quick bump on this thread.
Has anyone proven this one out yet on here.

On screen I am getting input and output, however I am not hearing anything being injected or output. Info from anyone who has actually got this working would be appreciated.

00:03:89:61:AE:C7
Sh: ./carwhisperer:  is a directory

Input Filename : /home/martin/message.wav
Sample Size: 8-bits
Same Encoding: unsigned
Channels: 1
Sample Rate: 11025

Time 00:20:45 [00:00:00] of 00:20:45 ( 100.0%) Output Buffer: 981.64K

Done
<<

dalepearson

Sr. Member
Sr. Member

Posts: 357

Joined: Thu Nov 09, 2006 10:03 am

Post Fri Aug 29, 2008 10:36 am

Re: Anyone have experiance with carwhisperer?

I purchased a Sony Ericsson HCB-30 last week, and connected it up to a car battery.
Sadly same sort of results as above, nothing appears to be injected, and nothing recorded.

Seems so little information on this exploit actually working, I might have to hang up my bluetooth gloves on this one. A shame as would have been interesting.

Return to Network Pen Testing

Who is online

Users browsing this forum: No registered users and 1 guest

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software