Main

Flipper Zero vs "Proper" Hacking Tools

Big thanks to Brilliant for sponsoring this video! Get started with a free 30 day trial and 20% discount: https://Brilliant.org/davidbombal (First 200 people that sign up will get a special discount). Is the Flipper Zero just a toy? Or can it actually be used for hacking? What are better tools? What about the HackRFOne, RTL-SDR or LimeSDR? // Occupy The Web Books // Linux Basics for Hackers: https://amzn.to/3JlAQXe Getting Started Becoming a Master Hacker: https://amzn.to/3qCQbvh Network Basics for hackers: https://amzn.to/3W1iiCQ // OTW Discount // Use the code BOMBAL to get a 20% discount off anything from OTW's website: https://davidbombal.wiki/otw Direct links to courses: Pro Subscriber: https://davidbombal.wiki/otwprosub 3 year deal: https://davidbombal.wiki/otw3year // Product Links REFERENCE // RTL-SDR Blog V4 R 828D: https://amzn.to/43aOSFB USA and https://amzn.to/3T6KZNq UK HackRFOne: https://amzn.to/49G80hb USA and https://amzn.to/3Tr85Q5 UK LimeSDR: https://amzn.to/3v1A0Nd USA and https://amzn.to/3TrVYT0 UK // Occupy The Web SOCIAL // X: https://twitter.com/three_cube Website: https://www.hackers-arise.com/ // YouTube Playlists mentioned // Linux Basics for Hackers: https://www.youtube.com/watch?v=YJUVNlmIO6E&list=PLhfrWIlLOoKOs-fjCPHdzD2icF2vORfwK&pp=iAQB Mr Robot: https://www.youtube.com/watch?v=3yiT_WMlosg&list=PLhfrWIlLOoKNYR8uvEXSAzDfKGAPIDB8q&pp=iAQB Flipper Zero: https://www.youtube.com/watch?v=F5iiwounbzY&list=PLhfrWIlLOoKPBt0vMsvhPAw4_7Qo_lQLK&pp=iAQB // YouTube Video REFERENCE // Flipper Zero: Hottest hacking device of 2023?: https://youtu.be/VF3xlAm_tdo // David's SOCIAL // Discord: https://discord.com/invite/usKSyzb X: https://www.twitter.com/davidbombal Instagram: https://www.instagram.com/davidbombal LinkedIn: https://www.linkedin.com/in/davidbombal Facebook: https://www.facebook.com/davidbombal.co TikTok: http://tiktok.com/@davidbombal YouTube: https://www.youtube.com/@davidbombal // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com // MENU // 00:00 - Coming up 00:34 - Brilliant sponsored segment 02:05 - OccupyTheWeb books 03:02 - The Flipper Zero and SDR hacking 07:18 - Flipper Zero banned in Canada // Flipper Zero used for car theft 09:08 - Popular SDR devices on the market 11:43 - Cars are vulnerable to SDR hacking 12:21 - Software for SDR hacking // Dragon OS 13:16 - Land Rovers being denied insurance 14:10 - Hacking takes time 15:53 - Dragon OS demo for SDR hacking // Capturing signals 29:00 - Is this legal? 32:00 - The rise of satellite hacking 32:51 - Spoofing GPS signals // hackers-arise.com SDR course 33:58 - Intelligence agencies becoming aware of SDR hacking 36:24 - Consider learning about SDR hacking 37:39 - Join OTW's online classes // hackers-arise.com courses 39:17 - Special discount on hackers-arise.com // Conclusion flipper zero flipper flipperzero hackrf hack hacking car hacking sub 1 ghz door bell car cars honda cve alarm system rfid nfc bluetooth infrared radio gpio Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #flipperzero #hack #hacking

David Bombal

5 hours ago

I'm very thankful that the FlipperZero came out. At the same time, I have to say that it has limited capabilities. It's, it works good. It does some things very well, but it has a very limited frequency spectrum. It has limited software. We're seeing the signals given off by all of the aircraft in the area. And it's refreshed every couple of seconds. You can watch these planes take off and land. I mean, it varies country to country, right? But what's like the legality of what you're doing here?
Have you ever noticed how some developers just seem to have that extra edge? Well, a lot of it comes down to one key skill, logic. And Brilliant's logic courses are here to give you that edge. In 18 hands-on lessons, Brilliant's first logic course takes you on a journey from the very basics of logic to advanced concepts that can set you apart in the tech world. You'll begin with practical order logic, learning to organize thoughts and processes in a way that's clear and efficient. It's the found
ation of logical thinking. Then it's on to strategic order logic. Here's where you start to see things differently, learning techniques to strategize and solve problems more effectively. By practicing seeking the truth, you'll develop the ability to discern and extrapolate answers from the information you have. It's about sharpening your mind to cut through the complexity. A really important skill in today's world. By the end of the first course, you won't just be following logic, you'll be crea
ting it. You'll stand out not just as a developer, but as a problem solver, a critical thinker and a real asset in any team. And as they say, there's more in the logic two course and much, much more in Brilliant's catalog. So are you ready to upgrade your logical thinking? Join me on Brilliant and unlock your potential. Visit brilliant.org forward slash David Bombal to start your journey. The first 200 signups get a special offer. Let's master logic together. Hey everyone, it's David Bombal back
with the amazing OccupytheWeb. OTW, welcome. Thank you, David. It's always an honor to be back on the best IT and cybersecurity channel on YouTube. Thank you for having me. It's great to have you back. And I will say just for everyone who hasn't seen our previous videos, I've linked them below. You should know who OccupytheWeb is. But if you don't, amazing person to listen to in the cybersecurity space. OK, by the way, you are part of the reason that my channel does well, gets so much feedback
about people complaining that you don't come on often enough. So it's great to have you back. So just for everyone who hasn't seen our previous videos, OccupytheWeb is the author of this book, Linux Basics for Hackers. We also have a video series. So I've linked that below. If you want to follow along with our videos and the book and OccupytheWeb, I love the books that you write, Getting Started, Becoming a Master Hacker. And I'd say this is my favorite network basics for hackers just because of
my background. I always say this. I love the way you write because you take it from a hacker's mindset. But I got to ask you this question, right? These little devices, really, really famous. But some people would say FlipperZeros are not actually that good. They're just toys and they dumb toys. Some people would even say, what's your opinion of these? And hopefully you can take us on a journey about SDR. Well, my opinion about FlipperZero, I have one. Of course, I got one early on when they fi
rst came out. And one of the things that I love about the FlipperZero is that it has made millions of people aware of essentially software defined radio, hacking radio signals. It has raised awareness. I've been doing SDR for hackers for a while and most people had no idea what I was talking about and what I was pursuing. And all of a sudden now everybody, millions of people around the world are saying, wow, you can do that. And with a simple device. And so I'm very thankful that the FlipperZero
came out. At the same time, I have to say that it has limited capabilities. It works good. It does some things very well, but it has a very limited frequency spectrum. It has limited software. So there's a lot more things that you can do with SDR, software defined radios, which software defined radios have been around for a while. They are basically a hardware device that simply converts the analog signals, the radio signals into a digital signal. And it used to be not too long ago that to do t
hese types of things, you would have to have multiple pieces of hardware and software to be able to pick up and transmit signals in the radio spectrum. Now you can get a inexpensive device like the RTL SDR, which we'll be using here today, which is the least one of the least expensive. It's about 30 to $40, depending on where you buy it from. And it's a good receiver. It's not a transceiver, it's not a transmitter. It just can receive signals. But for $35 or so, it's a powerful little device. An
d then if you team it up with some really powerful software, there's a lot of things that you can do with it. And so what I'd like to do is to talk about some of the software that we can use to be able to use these devices. Because in that I wouldn't say that the FlipperZero is a toy. I might say it's a gimmick, you know, it's but it's I'm really thankful about how much awareness that has raised about radio hacking. So this is, in my opinion, radio hacking is one of the leading edge fields of ha
cking and cybersecurity. And there's so many things that are run by radio signals, including your cell phone, your Bluetooth, your Wi-Fi, satellite signals, which we have a class coming up in later this year on satellite hacking. We also have an advanced SDR. We just ran our SDR class last year. We have an advanced SDR class coming up this summer. So these are these are the areas that I'm very excited and enthusiastic about. So hopefully I can convey that kind of enthusiasm to your listeners and
see the value in radio hacking, because quite honestly, there's just everything, darn near everything, not everything, but darn near everything, right, is using some kind of radio signal. I think you and I did an automobile hacking video a while ago. And one of the things we did there is that a lot of cars, modern cars now, have the key fob that will automatically unlock the door. And this is one of the things that you can do in radio hacking, among other things, which, by the way, the FlipperZ
ero, I think, just got banned in Canada. It's going to ask you about that. Yeah, because it's like, can this actually do what they think it can do? Because from what I have tested, I have to be careful what I say, but it doesn't sound like they actually understand what this can and can't do. Well, sometimes the person, the people who are making the rules and laws don't necessarily understand the technical side of it, but it can unlock some of the older model vehicles. And I think possibly the Ca
nadian officials are making a connection between the car thefts and FlipperZero that might not actually be there. Right. There might just be other reasons that cars are being stolen. But in any case, the FlipperZero has been banned in Canada because of car theft. But all the other devices, which there are, you know, there's at least a dozen, 20 other devices that are out there that can do the same thing. And those are not banned. So maybe that's what we should be looking at here. And we'll talk
about that. And, you know, maybe David, you and I should put together a series on Software Defined Radio. What do you think about that? Yeah, that'd be great. So if everyone is watching, would you like OTW and I to do a series of videos? I think HackRF might be one that a lot of people will be interested in. So put your comments below. But what do you think about HackRF? And I mean, I'm assuming there's a whole journey here that you're thinking about OTW. Yeah, I'm thinking about a whole journey
starting from simple to advanced. The simple being just setting up a receiver, picking up signals from various devices and vehicles and what have you. And then getting eventually into like hacking satellite signals. Yeah, that'd be great. But you're not going to hack satellite signals with an RTL SDR. So there's at least, you know, there's about four or five very popular SDR devices in the scene. Probably the most popular is going to be the RTL SDR because it's so inexpensive. It's about $35. T
hen there's the HackRF1 that runs about $350. So it's 10 times more expensive. There's also the LIME SDR and that's a device that we recently used. We did a course on developing a femtocell and setting up your own cell phone network. So you can set up your own cell phone network and you can intercept and manipulate calls on the cell system. But you're not going to do that once again with an RTL SDR. You're not going to do that with a FlipperZero either. And there's the BLADE RF and there's a num
ber of them. Some of them get pretty pricey. I mean, you can spend thousands of dollars on these devices, but still compared to what people used to spend on doing radio signal hacking, it's still inexpensive. So we try to keep to the less expensive devices. We try to keep it under $1,000 of hardware outside of the computer. In our classes, just because you get more than that, you really get outside of a lot of people's abilities to buy it. Included in the whole hardware is an antenna as well. So
you should have a good antenna. If you buy the RTL SDR, you get a simple dipole antenna, which is good. It does, you know, it'll pick up like things that are passing you by. Oh, you'll pick up radio signals, almost any radio station, pick up the signals from the aircraft flying overhead. You can listen into the towers, communication to airplanes with it. You can pick up a lot of things, but when you start talking about being able to do some more sophisticated work, and when you're, especially w
hen you're talking about doing things like satellite hacking, you're going to need a specialized antenna for that, but still these antennas, you know, they're going to run you from $50 to $500 in that range. So, but it's amazing what you can do if you're willing to make the investment in the time and the skills and a little bit of hardware. And the what's happening right now is that the whole world is beginning to see that this this area of hacking is largely unsecured. And that's what, you know
, it's probably part of what Canada is doing. They go, oh my gosh, you know, these cars are being stolen because they're not secure against these type of radio attacks. I doubt that there's that many cars being stolen in Canada with a FlipperZero, but to each their own, right. But if you get if you have sophisticated hardware and software, you can you can steal these guys. And and so what I'd like to do is kind of talk about some of the software that's available to you. I mean, there's one of th
e things that, you know, as this field develops, we're getting more and more software and each one of them have kind of a specific purpose. But recently, the last couple of years, there's been an operating system that has come out that's specifically for SDR hacking. And it's called Dragon OS. And it's amazing. It has hundreds, hundreds, hundreds, hundreds of tools for SDR hacking. And I'd like to kind of introduce your viewers to it today and do a simple a simple attack, a simple interception i
s called that resin call it a tab. We're going to intercept some signals and show you kind of the power of some of these tools. It's interesting in London, Land Rovers of people, owners of Land Rovers are being refused insurance because of how many have been stolen. Really? Yeah, it's something about one of the CEO, one of the CEO or some high ranking person within Land Rover said, this is not true. It's not the most stolen car in the UK. But from stuff that you've seen out there, like people co
mplaining, can't get insurance because it's stolen so often. And it's a problem, right? So I'm glad that you're going to do what you often do. And just for everyone watching, we've done a whole bunch of videos with Mr. Robot or about Mr. Robot and like, you know, truth versus fiction and OTW is great to have you here talking about, you know, what's actually real and what's just hype or fantasy or, you know, the movies and the same, you know, for cars. Most of the vehicles since 2014 have made it
more difficult to use a Flipper Zero or radio hack. Doesn't it still can be done. It's just more difficult, right? That's always the case in information security. You, you, somebody puts in some type of measure, a countermeasure against the hack doesn't mean you can't still hack. It just means you've got to work a little harder, which goes to what I've been saying on your show many times is that hacking is not 30 seconds or less, like a TikTok video, real hacking. Some sometimes can take years,
like something like Stuxnet or some of the others where very advanced individuals spend years developing the hack. If the target is insecure, like somebody basically did not do anything to secure the devices, secure the particular resource, then yeah, you might be able to take it down to 30 seconds or less. But if you're talking about a very secure environment, you might have to spend years of research to be able to do it. And that's part of what we try to teach at HackersArise. We're not tryin
g to teach the gimmicks, get all the views on TikTok because that's not really, that's not real. What's real in, at least in a penetration testing, intelligence, cyber war environment is some of those hacks will take years to actually bear fruit. So we try to, we try to raise the level and try to show people, you know, give them the background knowledge to be able to do that type of hacking. But in any case, what we, what we have here today is we have a, a operating system called Dragon OS and t
his is Dragon OS and it's been designed just for radio hacking and the beauty of it is that most of the radio hacking tools have a lot of dependencies. They have libraries and what have you that need to be installed to be able to function properly. And this can take, especially somebody who's new to Linux or new to radio hacking, sometimes lots of time to be able to install all the dependencies and get it all set up, whereas this operating system has not only the tools, but there are, and all th
e dependencies set up. So you're ready to roll when you download it. It's free, right? And it's free, of course. Yes. I hit free. So here's, here's the, the, the source. Okay. It's on SourceForge. Cimax Secutor, Cimax Secutor is the developer of it and he's done a really good job and it works with a number of different devices, RTL SDR, HackRF1, LimeSDR, BladeRF and many others. In our classes, we use RTL SDR, the HackRF1 and LimeSDR. Lime being the priciest and maybe the most powerful of these
and it runs about $500, whereas the RTL SDR costs about, I'd say $35. HackRF1 is an excellent device for somebody getting started, about $350. The only drawback to the HackRF1 is a couple of things. One is that it has a wide spectrum of radio signals that it can send and receive at. So that's a good thing, but it's, it's not full duplex. It's half duplex, which means that it can either send or receive, but not both at the same time and you can see where that might have some issues where, if you'
re trying to say, for instance, to replicate a cellular phone system, you've got to both be able to send and receive at the same time, right? Otherwise, otherwise it's going to be, it's going to not work smoothly. The BladeRF will work both full duplex and it's very fast. HackRF has another limitation in that it's a USB 2 and not USB 3. So it makes it a slow connection to your system. So here's where you can get it at. I would recommend that you download it. It's a, I don't know, three gigs or s
omething like that of operating system. It might be more, but it's pretty big and you know, you can create a virtual machine of it, or you can put it on barrier metal and get started in radio hacking. So with that having been said, let's take a look at this operating system. And it's actually Lubuntu. Okay. So for those people who are familiar with Ubuntu, it's going to look and feel similar. But here's the menu system down here. And you can see it has a lot of really good pieces of software bui
lt into it. All right. So here's the accessories, here's the educational, here's the graphics, some good stuff. Then we have ham radio. And we've got all a bunch of ham radio tools here, but most of the tools, right. Let me just go to the internet. All right. Office. So LibreOffice is all installed. Here's the other. So in under other, we've got a lot of powerful tools. All right. So GSM, EVO for the GSM networks. Let me see if I can get all of this on the screen. Let's see. We have Osmo network
in a box right here. Yate. Okay. These are all cell, they're cell network applications. They're tools for hacking or creating your own cellular network. All right. This is create your own cellular network. Yate creates your own cellular network. These things that we've done in our class. Here's an IMSI catcher, right. For catching the IMSI's as they come off the cell towers and a number of other things. So lots of interesting tools. And there are some system tools here. All of the tools, you ca
n see them by going to user. CD user source. And all the tools should be there. It's we still there. Look at them. Lots and lots of tools. Including GNU radio. Okay. We have, what else do we have here that might be interesting? GR satellites here. There's a GSN evil we're talking about that allows you to hack, um, GSM signals. Here's dump 1090, which is what we're going to use today. We're going to use dump 1090 as a quick display of what we can do with the, without a whole lot of skill and, uh,
with just a RTL SDR and the Dragon OS. And so you get an idea of what's out there. There's lots of things out there. There is a some LTE. Here it is. LTE cell scanner. Okay. For scanning cell towers, LTE, um, cell towers, we don't have a, a 5G scanner yet that I'm aware of, if anybody knows of one, let me know, but I'm not aware of one yet. So we can scan for GSM. We can scan for LTE, fifth generation 5G. Uh, I don't see it yet. In any case, if you're going to scan for those kinds of, of 5G, 5G
, some of the 5G is operating at as high a frequency as five gigahertz. So many of these devices won't operate at that high a frequency. Like for instance, the FlipperZero won't even operate at one gigahertz. It's all sub one gigahertz. Uh, something like hack RF, I think goes up to 1.6 gigahertz. The blade RF will go up to about three and a half gigahertz. So none of these devices are going to operate in these very high frequencies. Now that having been said, we're not seeing much of the cell s
ignals operating at those high frequencies right now. Most of the 5G is operating at lower frequencies, similar to LTE, but the whole plan to get the speeds up that they've promised us, they're going to have to move up to the 5G five gigahertz area. So for right now we don't have something really hack or to intercept those signals, but we probably will very, very soon. That having been said, all right, what I have here is I've got an RTLSDF. So the least expensive or one of the least expensive,
I guess there actually are some that are less expensive and I'm going to go ahead and just go LSUSB. Right. And this is, will show me what is connected to my system. And you can see it's not connected. Oh, okay. So I've got to do something. So let's go up here and connect it and let's go removable devices. And you can see it right here. Here's the Realtek RTLSDR and connect it. All right. So if on a virtual machine, I've got to go through this process of connecting it. All right. I should point
out to that doing SDR through a virtual machine has some limitations as we've found. Sometimes that USB connection between the physical machine and the virtual machine can be problematic. So just, if you're new in this field and you're starting out and you're having problems, it might be new USB. All right. So let's go ahead and try LSUSB again. And now we see it. Realtek Semiconductor RTL. Okay. That's it right there. So now we're connected. And what we can do with this now is to go ahead and,
well, let's introduce a subject here, airplanes and ships and other vehicles all send out a signal that gives their location. Okay. And, and speed and altitude in case of airplanes, certainly not in ships. Maybe on some ships you would have to give them. And so this signal can be intercepted by your simple, inexpensive RTL SDR. And that's what we're going to be doing. So what we're going to do is we're going to say, there's a tool here. I showed it to you up above. It's called dump 1090 because
it's called dump 1090 because 1090 is the frequency that these signals come. And this is all the airplanes. We're going to look at just airplanes today. All the aircraft have to send out the signal that gives the cell towers and others their position and speed and altitude. Of course, you can also pick up their radio communications too, but that's a different tool. So to go ahead and run this, all right. We go dot dot forward slash. Okay. Dump 1090 and says it's a directory. So I have to go ther
e first. All right. So I'm going to think it's a dump 1090 that there we go. Let's take a look inside that directory and there's my executable binary right there. All right. And it's already set to execute. So I can go ahead then and just go dump 1090 and it goes and starts. What it's doing is it's simply picking up the, the signals from all the aircraft in the area. All right. And this is not really very useful information. Well, it's useful, but it's not in a form that's easy to use. So what w
e're going to do is we're going to go ahead and change some switches on it. Okay. And we'll show you how you can actually use that more. I'm going to stop it with a control C. All right. So I should point out that this, these types of signals, okay. Are sent out on by almost every vehicle that's out there in our modern world. It's a way for, you know, regulators and the, the, the people who are in charge of making sure they don't crash into each other to, to, to track their location and their in
formation. So let's go ahead and try a different switch. Let's try, let's take a look at the help screen first, before we go on it further. Go dump 10, 1090-H. All right. Here we go. There's a lot of stuff here. Okay. So we've got a long, we've got a long series to come. All right. Go on. Well, yeah, but we just, like anything, there's lots of options, right? But in general, you can, you can reduce these tools to just a few switches to get us to do what you want. All right. Lots of, lots of opti
ons here. So what we want to do is to maybe go ahead and say, don't 1090. 1090 and then go interactive. See, that was one of the options up above. Right. Let's go. Interactive mode, refreshing data on screen. Okay. So let's go ahead and do this. And here we go. Whoa. Look at all those, look at all those planes. So you can see here, this is, this is hex. Okay. The mode, the squawk, the flight, the flight number, the altitude, the speed, the heading, the latitude, the longitude and more. All right
. So we're seeing the signals given off by all of the aircraft in the area and it's refreshed every couple of seconds. You can watch these planes take off and land. Okay. Um, I should point out that I've got a good antenna on this thing. So I was going to say, yeah, I've got, I've got, I'm picking up a lot more flights that you might at home. I've got a parabolic antenna. So if you're not familiar, it's kind of like the dishes that you've seen. You've seen kind of like a, um, a TV dish similar t
o that same shape. Right. And it picks up the signals from a much larger distance. It costs, I think I paid like under $200 for it. And if you're, you know, if I was doing this with a regular dipole antenna, I'd see a fraction of these. But this is picking up all the information so that I can see all of the flights in, in the area quite for some miles, actually. So I'll keep by the web. A question a lot of people might have is, you know, I don't want to go to jail. I just want to learn and I wan
t to learn how to protect. Yeah. So what's the, I mean, it varies country to country, right? But what's, what's like the legality of what you're doing here? Well, the legality of what I'm doing here is it's, there's no problem with it. I don't want to go to jail either. By the way. But this is simply, you know, this is, would be similar to just picking up a local radio station, some of these signals are given off by the aircraft and it's, it's out there, it's unencrypted. It's anybody can see it
. There's nothing, there's no laws against picking up this information and reading it. Now, if you were to do something to manipulate it, okay, or to block it, or in, in sending out your own signal, okay. Now that's what you're starting to get into some legal issues. Just reading it. This is similar to just like I said, just turning on your radio and picking up the radio signals. You're not manipulating it. In many countries, sending a signal at certain frequencies all is illegal. Yeah. Right. B
ut here, all we're doing is we're listening in, we're just picking up this information, decoding and displaying it on the screen for us. I will say this for everyone watching. This is not legal advice. This, you have to look at your own country's rules and decide for yourself. But I think OccupytheWeb, the great thing about what you're doing here and the great thing, like you said about the little flipper zeros, right, is it raises awareness because we have all this stuff around us and people ar
en't aware how vulnerable some of this stuff is. And I think the FlipperZero is forcing manufacturers and governments to take action and improve the security on stuff because it's not the good people that are causing the trouble. A lot of bad people know about this stuff already anyway. I agree with you 100%. So the laws are going to vary by country. So make sure that you check your laws. But I think in the case here of just receiving, I don't think anybody has any laws against that. But when yo
u start manipulating the signals or blocking the signals or transmitting signals and the RTL SDR cannot transmit, it can only receive. So if you're doing the RTL SDR, you're not probably going to get into any legal issues because you're not going ahead and sending any signals. Once you start sending signals, then you can possibly get yourself into some legal jeopardy. Yes, the this type of work has been done by military intelligence and tell it national security agencies around the world for dec
ades. The only thing that's different is that now the average user with a laptop and a few hundred dollars can do something very similar. So yes, the FlipperZero has raised the awareness that, hey, we need to do something about the security of radio signals. And one of the things that's happened in a very recent past is that the hacking of these satellites has started to take place. As a matter of fact, this is kind of in the news right now between nation states. And they have discovered, surpri
se, surprise, that there's no security on the satellites. And we're so dependent. You might think, well, that's all the national government and military satellites. Well, almost all of us are using signals transmitted by those satellites, whether it be Starlink, of course, but also, you know, your cell communications, your GPS, you know, these things are all going through satellites. And if somebody were to hack them, we could all lose that capability. We're all so dependent upon it. One of the
things that we do in our SDR class is I show people how you can actually spoof your GPS signal so that you appear to be someplace else. Then you actually are. Now, as far as I know, there's no there's no law against that. But you can simply send out a GPS signal up to the satellite and send inaccurate information. So in the class, we spoofed that I was actually sitting in the Kremlin. And so my GPS signal said I was in the Kremlin sitting next to Putin. And so obviously I'm not. But that's the k
ind of thing that you can do. And what you know, we'll what we'll do is start off slow here, let people get familiar with the SDR, go out and buy a little bit of hardware. If you can only afford your RTL SDR, we'll do a few cool hacks with the RTL SDR. And then we'll kind of advance into the hack RR and some of the other devices that more sophisticated capabilities. So OccupytheWeb, you're telling me offline and I can't remember the details. So just correct me if I'm wrong. But people from perha
ps three letter agencies or some people came to your courses because they were trying to find out what people like you can actually do against satellites. Right. That's that's satellites and other radio communication. So, yes, we have students from around the world, from national governments and law enforcement. So it's not just penetration testers. We have a lot of people now who come from agencies that are are have been given the task of securing national assets. And we have law enforcement fr
om the US and Canada and Belgium and Ukraine, Germany, I think Finland as well. And so they are coming to our courses so they can learn what is possible. And so by learning what's possible, they can better secure those resources. I think that's a really important thing to say, because sometimes we get flak, right. On YouTube about like, how you how can you teaching people this stuff? But the thing is, it's awareness. Right. If you don't have red teamers or hackers at the time of this recording,
I mean, this big development in AI where you can generate videos. And it was interesting that people that have access to that are red teamers. You know, if you don't give the red teamers or the good guys who are trying to test your security, you know, the bad guys are going to get access anyway. Exactly. So part of, you know, a red teamer is to test the security of the system, the network, the resources so that they can find the holes and vulnerabilities before the bad guys do. If you don't do t
hat, then the bad guys are going to get it. I mean, the bad guys get in no matter what, you know, sometimes, but they get in a lot more if there wasn't somebody testing the security first and finding the vulnerabilities and then patching those vulnerabilities. That's what we do is that we go ahead and we try to find it in the form management. Here's the problem. Somebody is going to to get in this way. You need to do something easy to patch it. We need to have some kind of compensating control t
o keep the bad guys from getting in. So, yes, that's what we're doing here. We're not teaching people to steal your life savings out of your bank account. Okay, by the way, I really want to thank you for sharing. It's fantastic to have someone like you, you know, sharing this information with all of us, especially for the next generation, you know, enabling people to learn about this stuff, protect companies, protect their governments or whatever they're involved in or wherever they're involved.
But, you know, also get jobs. This stuff is out there. It's great that you're teaching and not keeping the knowledge to yourself. So thanks so much for sharing. You're welcome. I always enjoy your welcoming me on your show and having me here to discuss these things. I enjoy sharing this with the public. And what I'd like to do is continue, as I said, this process of starting off simple and getting people into SDR. We'll continue this process of going through simple to more complex SDR hacks. An
d this is state of the art, folks. So, you know, if you want to make a career or you're already in the field and you want to advance your career, this is something that you should be considering to learn how to do, because it's going to separate you from all the other people, you know, who don't understand what this field is about and how important it is for information security. OccupytheWeb, there's a lot of stuff that you and I talk about offline that I wish we could put on YouTube. But just
for everyone watching, I have to hold OccupytheWeb back sometimes because he has these fantastic ideas. And I say, look, I don't want my channel striked or get a channel strike against my channel or my channel just removed. Right. So, OccupytheWeb, where can people go to learn a lot more? Like, can they attend your classes? Stuff like that. You know, just tell us where people can go. Well, we have a class in our Subscriber Pro program, which is the Advanced Classes, where we do SDR hacking. And
then we have a Advanced SDR hacking class coming up in, I think it's in June or July. And then we have a Satellite hacking class coming up in the fall, September, I believe. Advanced SDR is June 11th through the 13th. We've done a couple of the SDR hacking classes, around like the third version of it. This will be the first time we've done the Advanced SDR, June 11th through the 13th. And we have Satellite hacking on September 10th through 12th. And as we are sitting here right now, there is a m
ajor issue about Satellite hacking going on between national governments right now. And it's because people have finally realized that these satellites, their communication is not secure. And not only can you intercept the signals, but you can also send signals up to these satellites that can manipulate them and control them. Just for everyone watching, I've put a link below. And I'll keep by the way, I'm going to let you say this because you've been very kind to share a discount for people that
use my link below, right? We do. Everybody who's watching us here can use the discount code BOMBAL, David's last name, and get 20% off on anything that HackersArise. I really appreciate you doing that. And for everyone watching, please put your comments below, stuff that you want to see that you really want us to cover. OccupytheWeb's got a whole bunch of content, a huge amount of knowledge. So let us know the kinds of stuff that you want to see. OTW, as always, thanks so much. Thanks, Dave. It
's always good being here.

Comments

@davidbombal

Big thanks to Brilliant for sponsoring this video! Get started with a free 30 day trial and 20% discount: https://Brilliant.org/davidbombal (First 200 people that sign up will get a special discount). Is the Flipper Zero just a toy? Or can it actually be used for hacking? What are better tools? What about the HackRFOne, RTL-SDR or LimeSDR? // Occupy The Web Books // Linux Basics for Hackers: https://amzn.to/3JlAQXe Getting Started Becoming a Master Hacker: https://amzn.to/3qCQbvh Network Basics for hackers: https://amzn.to/3W1iiCQ // OTW Discount // Use the code BOMBAL to get a 20% discount off anything from OTW's website: https://davidbombal.wiki/otw Direct links to courses: Pro Subscriber: https://davidbombal.wiki/otwprosub 3 year deal: https://davidbombal.wiki/otw3year // Product Links REFERENCE // RTL-SDR Blog V4 R 828D: https://amzn.to/43aOSFB USA and https://amzn.to/3T6KZNq UK HackRFOne: https://amzn.to/49G80hb USA and https://amzn.to/3Tr85Q5 UK LimeSDR: https://amzn.to/3v1A0Nd USA and https://amzn.to/3TrVYT0 UK // Occupy The Web SOCIAL // X: https://twitter.com/three_cube Website: https://www.hackers-arise.com/ // YouTube Playlists mentioned // Linux Basics for Hackers: https://www.youtube.com/watch?v=YJUVNlmIO6E&list=PLhfrWIlLOoKOs-fjCPHdzD2icF2vORfwK&pp=iAQB Mr Robot: https://www.youtube.com/watch?v=3yiT_WMlosg&list=PLhfrWIlLOoKNYR8uvEXSAzDfKGAPIDB8q&pp=iAQB Flipper Zero: https://www.youtube.com/watch?v=F5iiwounbzY&list=PLhfrWIlLOoKPBt0vMsvhPAw4_7Qo_lQLK&pp=iAQB // YouTube Video REFERENCE // Flipper Zero: Hottest hacking device of 2023?: https://youtu.be/VF3xlAm_tdo // David's SOCIAL // Discord: https://discord.com/invite/usKSyzb X: https://www.twitter.com/davidbombal Instagram: https://www.instagram.com/davidbombal LinkedIn: https://www.linkedin.com/in/davidbombal Facebook: https://www.facebook.com/davidbombal.co TikTok: http://tiktok.com/@davidbombal YouTube: https://www.youtube.com/@davidbombal // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com // MENU // 00:00 - Coming up 00:34 - Brilliant sponsored segment 02:05 - OccupyTheWeb books 03:02 - The Flipper Zero and SDR hacking 07:18 - Flipper Zero banned in Canada // Flipper Zero used for car theft 09:08 - Popular SDR devices on the market 11:43 - Cars are vulnerable to SDR hacking 12:21 - Software for SDR hacking // Dragon OS 13:16 - Land Rovers being denied insurance 14:10 - Hacking takes time 15:53 - Dragon OS demo for SDR hacking // Capturing signals 29:00 - Is this legal? 32:00 - The rise of satellite hacking 32:51 - Spoofing GPS signals // hackers-arise.com SDR course 33:58 - Intelligence agencies becoming aware of SDR hacking 36:24 - Consider learning about SDR hacking 37:39 - Join OTW's online classes // hackers-arise.com courses 39:17 - Special discount on hackers-arise.com // Conclusion flipper zero flipper flipperzero hackrf hack hacking car hacking sub 1 ghz door bell car cars honda cve alarm system rfid nfc bluetooth infrared radio gpio Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #flipperzero #hack #hacking

@mason35715

Thank you both for everything. It's always a honor and pleasure to have you both

@KnyfFite

Yes! A full series would be amazing. Just getting into IOT and LoRa, and I'm fascinated already. Learning more about wireless comms is incredible. Thank you both so much for these videos.

@renzokuken2g

Just picked up my Flipper a while ago, been doing this type of "monitoring" since I was 19 and never knew it. Started with CB radios...lols Love this ,thanks HTW and David!

@jamesmckee9017

Please do videos on the HackRF One!

@JonMurray

Thank you for making this video. There are thousands of videos on the flipper but I’ve been hoping you’d make a detailed longer form one giving the actual facts of what it can and can’t do. Thanks guys ✌🏻

@Richkunst

I hope the The Cyberwarrior Handbook is published a little earlier then 2079, great video, really helpful

@philmccracken1392

Please make the SDR series 🙏

@mytechnotalent

Great job David and OTW! So many people I do not think take the time to understand the full capabilities of some of these devices and this is so helpful! Yes a SDR series!!!

@hamidben2865

Thanks david for your efforts, i'm exited for SDR series

@jabadoo5307

I’d love a good set of classes on SDR. I’ve got an rtl-sdr to pickup my home alarm system and transmit through mqtt to home assistant. I’m at a roadblock trying to get water meter integrated to HA. I think it’s time to upgrade to a transceiver. Keep up the videos, you both are great!!!

@6i668

Yes, do a series on SDR, thanks guy's

@user-qd7ph5ex8c

David- I dont remember when i came across you, but you are my first subscription! Thanks for making these videos!

@johngrikis9049

I really enjoy these videos. It's great how a mechanic is now a Cybersecurity expert teaching people from around the world even in government bodies. I am not in IT but learning and picking up a lot of it.

@fk319fk

While I am not interested in using the SDR for hacking, I am very interested in using it to examine natural phenomena. Thanks for the overview.

@yassersaied7279

Amazing series between best IT guy in industry and OTW

@Wardyworlds

I started with Flipper zero and it's still very handy, a bit like a Swiss army knife, all the tools but not as good as using Kali and also python to write your own tools, arduino and creating your own tools with hardware and raspberry pi for some embedded tools and portability running scripts.

@user-kf1lf7lh5j

Thankyou for inviting OTW. Please make a video with OTW base on radio signal hacking

@badgertheskinnycow

I would appreciate a series upon SDR and related subjects 👍

@therealmonkeymonkeyaap

hello david! hackers-arise seems to be offline?