Follow Us

We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message

Hacker-built drone can hunt, hijack other drones

Security researcher releases software to hijack Parrot drones out of the sky

Article comments

A security researcher has released software and technical instructions for modifying a drone so that it can identify and hijack other drones.

Security researcher Samy Kamkar created the hacker drone, which uses the Parrot AR.Drone 2.0 radio-controlled quadcopter -- a popular unmanned helicopter with four rotors.

Made by French wireless products manufacturer Parrot, the AR.Drone 2.0 has a built-in Wi-Fi wireless controller that's used to control the drone remotely from iOS or Android mobile devices.

Kamkar's drone carries a Raspberry Pi embedded computer running Linux and has two USB wireless adapters connected to it, an Alfa AWUS036H Wi-Fi network card with an external antenna and an Edimax EW-7811Un nano Wi-Fi adaptor. A lightweight 1000mAh USB battery is also part of the payload and powers the Raspberry Pi.

The Alfa Wi-Fi adaptor is important because its wireless chipset can run in monitor mode. The monitor, or RFMON (Radio Frequency MONitor), mode can be used to monitor and inject raw packets into other wireless networks without being connected to them, Kamkar said in his SkyJack presentation video.

Kamkar developed a Perl application dubbed SkyJack that runs on the Raspberry Pi and uses other open-source software to hijack drones.

SkyJack uses the Alfa adapter's monitor mode to identify other Parrot AR Drones by their MAC addresses, which all contain Parrot's vendor identifier, and then attempts to deauthenticate their real owners.

This is done using Aircrack-ng, an open-source program for hacking into wireless networks. According to the Aircrack-ng documentation a deauthentication attack "sends disassociate packets to one or more clients which are currently associated with a particular access point."

Once the real owner is disconnected from a targeted drone, SkyJack connects to it pretending to be the owner and starts sending commands using node-ar-drone, an open-source library that implements the networking protocols used by the Parrot AR Drone 2.0.

The Parrot drone with the Raspberry Pi attached is only needed for mobile attacks, but the SkyJack application can also run from any Linux laptop on the ground and hijack drones out of the sky, Kamkar said in a blog post.

The researcher released SkyJack on GitHub and said that the idea for creating a drone hijacking application came to him after reading that Amazon is considering using drones to deliver packages.

"Today Amazon announced they're planning to use unmanned drones to deliver some packages to customers within five years. Cool!" Kamkar said. "How fun would it be to take over drones, carrying Amazon packages...or take over any other drones, and make them my little zombie drones. Awesome."

Kamkar is known for releasing the infamous Samy cross-site scripting worm on MySpace in 2005, forcing the company to temporarily shut down the website, an act for which he served three years of probation during which he could not use a computer. Since 2008, he has been involved in security research, uncovering a serious flaw in PHP, exposing privacy risks associated with the collection of GPS coordinates and wireless network information by mobile devices, and releasing Evercookie, a highly persistent browser cookie that demonstrates how many technologies can be used to track users.

Parrot was not immediately available for comment.



Share:

More from Techworld

More relevant IT news

Comments



Send to a friend

Email this article to a friend or colleague:

PLEASE NOTE: Your name is used only to let the recipient know who sent the story, and in case of transmission error. Both your name and the recipient's name and address will not be used for any other purpose.

Techworld White Papers

Choose – and Choose Wisely – the Right MSP for Your SMB

End users need a technology partner that provides transparency, enables productivity, delivers...

Download Whitepaper

10 Effective Habits of Indispensable IT Departments

It’s no secret that responsibilities are growing while budgets continue to shrink. Download this...

Download Whitepaper

Gartner Magic Quadrant for Enterprise Information Archiving

Enterprise information archiving is contributing to organisational needs for e-discovery and...

Download Whitepaper

Advancing the state of virtualised backups

Dell Software’s vRanger is a veteran of the virtualisation specific backup market. It was the...

Download Whitepaper

Techworld UK - Technology - Business

Innovation, productivity, agility and profit

Watch this on demand webinar which explores IT innovation, managed print services and business agility.

Techworld Mobile Site

Access Techworld's content on the move

Get the latest news, product reviews and downloads on your mobile device with Techworld's mobile site.

Find out more...

From Wow to How : Making mobile and cloud work for you

On demand Biztech Briefing - Learn how to effectively deliver mobile work styles and cloud services together.

Watch now...

Site Map

* *