{"id":5277,"date":"2019-08-23T23:08:24","date_gmt":"2019-08-23T15:08:24","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=5277"},"modified":"2019-08-23T23:08:44","modified_gmt":"2019-08-23T15:08:44","slug":"zigdiggity-zigbee-hacking-toolkit","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2019\/08\/zigdiggity-zigbee-hacking-toolkit\/","title":{"rendered":"ZigDiggity &#8211; ZigBee Hacking Toolkit"},"content":{"rendered":"<p>ZigDiggity a ZigBee Hacking Toolkit is a Python-based IoT (Internet of Things) penetration testing framework targeting the ZigBee smart home protocol.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2019\/08\/ZigDiggity-ZigBee-Hacking-Toolkit-640x395.jpg\" alt=\"ZigDiggity - ZigBee Hacking Toolkit\" width=\"640\" height=\"395\" class=\"aligncenter size-medium wp-image-5282\" srcset=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2019\/08\/ZigDiggity-ZigBee-Hacking-Toolkit-640x395.jpg 640w, https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2019\/08\/ZigDiggity-ZigBee-Hacking-Toolkit-1024x631.jpg 1024w, https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2019\/08\/ZigDiggity-ZigBee-Hacking-Toolkit.jpg 1093w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/><\/p>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<p>ZigBee continues to grow in popularity as a method for providing simple wireless communication between devices (i.e. low power\/traffic, short distance), &#038; can be found in a variety of consumer products that range from smart home automation to healthcare. Security concerns introduced by these systems are just as diverse and plentiful, underscoring a need for quality assessment tools. <\/p>\n<p>This ZigBee penetration testing framework enables cybersecurity professionals, auditors, and developers to run complex interactions with ZigBee networks using a single device.<\/p>\n<p>The current version of ZigDiggity is solely designed for use with the Raspbee, the RaspBee premium is ZigBee addon for Raspberry Pi with Firmware.<\/p>\n<p>The RaspBee provides:<\/p>\n<ul>\n<li>Pluggable add on with radio module (IEEE 802.15.4) for Raspberry Pi<\/li>\n<li>Brings Raspberry Pi as LAN-ZigBee gateway<\/li>\n<li>Frequency: 2.4 GHz ISM band, can be used worldwide<\/li>\n<li>Based on Atmel\u00b4s single chip microcontroller ATmega256RFR2<\/li>\n<li>With ZigBee firmware and extensive software package to control up to 200 devices<\/li>\n<\/ul>\n<h2>Using ZigDiggity the ZigBee Hacking Toolkit<\/p>\n<h2>\n<p>Currently, scripts are available in the root of the repository, they can all be run using Python3:<\/p>\n<pre>python3 listen.py -c 15<\/pre>\n<p>When running with <a href=\"https:\/\/www.darknet.org.uk\/2009\/07\/wireshark-1-2-1-released-network-protocol-analyzer\/\">Wireshark<\/a>, root privileges may be required.<\/p>\n<h3>Scripts for ZigBee Hacking<\/h3>\n<ul>\n<li><strong>ack_attack.py<\/strong> &#8211; Performs the acknowledge attack against a given network.<\/li>\n<li><strong>beacon.py<\/strong> &#8211; Sends a single beacon and listens for a short time. Intended for finding which networks are near you.<\/li>\n<li><strong>find_locks.py<\/strong> &#8211; Examines the network traffic on a channel to determine if device behavior looks like a lock. Displays which devices it thinks are locks.<\/li>\n<li><strong>insecure_rejoin.py<\/strong> &#8211; Runs an insecure rejoin attempt on the target network.<\/li>\n<li><strong>listen.py<\/strong> &#8211; Listens on a channel piping all output to wireshark for viewing.<\/li>\n<li><strong>scan.py<\/strong> &#8211; Moves between channels listening and piping the data to wireshark for viewing.<\/li>\n<li><strong>unlock.py<\/strong> &#8211; Attempts to unlock a target lock<\/li>\n<\/ul>\n<p>You can download ZigDiggity here:<\/p>\n<p><a href=\"https:\/\/github.com\/BishopFox\/zigdiggity\/archive\/master.zip\">zigdiggity-master.zip<\/a><\/p>\n<p>Or read more <a href=\"https:\/\/github.com\/BishopFox\/zigdiggity\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>ZigDiggity a ZigBee Hacking Toolkit is a Python-based IoT (Internet of Things) penetration testing framework targeting the ZigBee smart home protocol. ZigBee continues to grow in popularity as a method for providing simple wireless communication between devices (i.e. low power\/traffic, short distance), &#038; can be found in a variety of consumer products that range from [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"none","_seopress_titles_title":"ZigDiggity - ZigBee Hacking Toolkit","_seopress_titles_desc":"ZigDiggity a ZigBee Hacking Toolkit is a Python-based IoT (Internet of Things) penetration testing framework targeting the ZigBee smart home protocol.","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[22],"tags":[],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/5277"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=5277"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/5277\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=5277"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=5277"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=5277"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}