Loading video...

Video Failed to Load

Go Home

Ever wonder how LTE-based IoT devices communicate over the internet? I modified a Chinese GPS tracker that is in common use in the US and got the cell modem to communicate with internet systems other than the GPS tracker's cloud servers.

92,871 views • 8 months ago •via X (Twitter)

23 Comments

Matt Brown's profile picture
Matt Brown8 months ago

first video in series:

Adam Langley's profile picture
Adam Langley8 months ago

Our original tracking devices used SMS to communicate their location. It was basically a Nokia 5110, a GPS module and board in between to get the location data and then communicate it using AT commands via the Nokia!

Deral Heiland's profile picture
Deral Heiland8 months ago

Me and a @CarlotaBindner have been doing research in this area also, we released a white paper and spoke at @BlackHatEvents We will be releasing a white paper soon on weaponization of cellular for RSAC26 Keep up the good work !

Embedr's profile picture
Embedr8 months ago

Hot damn. Bet the comments in that firmware are *chef's kiss* "TODO: fix this later" - 2015

Adam Langley's profile picture
Adam Langley8 months ago

Years ago a Chinese tracking manufacturer sold thousands of units, problem is they all used the same either IMSI or ICCID ( can’t remember which ) as to avoid costs. Phone network caught on and disabled that one number, suddenly thousands of units stopped working.

Allan Ryan's profile picture
Allan Ryan8 months ago

Where software meets hardware, a new frontier opens: endless customization, building exactly what *we* need. Never been a more exciting time to be alive

Pete's profile picture
Pete8 months ago

Love your work, do Flock Camera next

Robin Bradshaw's profile picture
Robin Bradshaw8 months ago

depending on the model it might be possible to get it running with if you want to run your own reporting server or interface it with home assistant

Adam Langley's profile picture
Adam Langley8 months ago

Some tracking devices mobile comms you end up just NAT’d with internet access. Some just connect in to a private network with no internet access at all.

T's profile picture
T8 months ago

I always wondered if the bootloader on these devices has a hidden firmware that still calls home even if you flash with a custom firmware like you did. Thoughts?

Misfit Maverick's profile picture
Misfit Maverick8 months ago

TCP IP over GSM / UMTS / LTE networks

rhawk's profile picture
rhawk8 months ago

Mine just connects to T-Mobile that I pay monthly for. Keeps a warehouse online.

Giordano Bruno's profile picture
Giordano Bruno8 months ago

I don't get it? Your bypassing the modem? I just use a wave share 7060 with ESP32 and for SIM. Costs $30 and I have global HTTP, TCP, SMS connectivity. Is this just proof of concept ?

Cl0uddStrife 🛰️👾's profile picture
Cl0uddStrife 🛰️👾8 months ago

This is so cool

Patrick's profile picture
Patrick8 months ago

Is the device registered on a cellular plan? Also does it have a data plan?

Steve grins's profile picture
Steve grins8 months ago

love this. reverse engineering these trackers is always a rabbit hole. did you have to wrangle AT commands or did it speak some weird custom protocol?

MrRobotMan's profile picture
MrRobotMan8 months ago

Wait who pays the LTE bill?

TaffyByte's profile picture
TaffyByte8 months ago

Really enjoyed this !

coleipleni's profile picture
coleipleni8 months ago

You need t practice getting to the point far more quickly

Illuminated's profile picture
Illuminated8 months ago

@CapeCellular esim usb?

☠️'s profile picture
☠️8 months ago

Ok now that is freaking cool. For a newbie like me - do you care to explain the hardware/software tool chain you are using?

Pius's profile picture
Pius8 months ago

Interesting

Sébastien B's profile picture
Sébastien B8 months ago

@pbeyssac

Related Videos