Radio Hack Box- Tool to demonstrate vulnerabilities in wireless input devices

SySS Radio Hack Box is a proof-of-concept software, to demonstrate the repetition and keyboard injection vulnerabilities of the Cherry AES B.Unlimited wireless keyboard.

Requirements

Raspberry Pi
Raspberry Pi Radio Hack Box shield (an LCD, LEDs and some buttons)
nRF24LU1 + USB radio dongle with flashed nrf-research-firmware by the Bastille research team.
- Bitcraze CrazyRadio PA USB dongle
- Logitech Unifying dongle (model C-U0007, Nordic Semiconductor based)
Python2
PyUSB

Automatic start

To automatically start the Radio Hack Box process on the Raspberry Pi after a reboot, use the script init.do the following entry


@reboot python2 /home/pi/radiohackbox/radiohackbox.py

Mode of use

Currently Radio Hack Box, only has 4 buttons of use

start / stop recording
Start repetition (Replay attack)
Start Attack (Key injection)
Start scanning

he best way to turn off the Radio Hack Box without corrupting the file system is by pressing the SCAN button directly followed by the RECORD button.

Demo

The demonstration video illustrates the repetition and keystroke attacks against an AES encrypted wireless keyboard using the SySS Radio Hack Box aka Cherry Picker