正在加载视频...

视频加载失败

Ever wonder how LTE-based IoT devices communicate over the internet? I modified a Chinese GPS tracker that is in common use in the US and got the cell modem to communicate with internet systems other than the GPS tracker's cloud servers.

92,871 次观看 • 8 个月前 •via X (Twitter)

23 条评论

Matt Brown 的头像
Matt Brown8 个月前

first video in series:

Adam Langley 的头像
Adam Langley8 个月前

Our original tracking devices used SMS to communicate their location. It was basically a Nokia 5110, a GPS module and board in between to get the location data and then communicate it using AT commands via the Nokia!

Deral Heiland 的头像
Deral Heiland8 个月前

Me and a @CarlotaBindner have been doing research in this area also, we released a white paper and spoke at @BlackHatEvents We will be releasing a white paper soon on weaponization of cellular for RSAC26 Keep up the good work !

Embedr 的头像
Embedr8 个月前

Hot damn. Bet the comments in that firmware are *chef's kiss* "TODO: fix this later" - 2015

Adam Langley 的头像
Adam Langley8 个月前

Years ago a Chinese tracking manufacturer sold thousands of units, problem is they all used the same either IMSI or ICCID ( can’t remember which ) as to avoid costs. Phone network caught on and disabled that one number, suddenly thousands of units stopped working.

Allan Ryan 的头像
Allan Ryan8 个月前

Where software meets hardware, a new frontier opens: endless customization, building exactly what *we* need. Never been a more exciting time to be alive

Pete 的头像
Pete8 个月前

Love your work, do Flock Camera next

Robin Bradshaw 的头像
Robin Bradshaw8 个月前

depending on the model it might be possible to get it running with if you want to run your own reporting server or interface it with home assistant

Adam Langley 的头像
Adam Langley8 个月前

Some tracking devices mobile comms you end up just NAT’d with internet access. Some just connect in to a private network with no internet access at all.

T 的头像
T8 个月前

I always wondered if the bootloader on these devices has a hidden firmware that still calls home even if you flash with a custom firmware like you did. Thoughts?

Misfit Maverick 的头像
Misfit Maverick8 个月前

TCP IP over GSM / UMTS / LTE networks

rhawk 的头像
rhawk8 个月前

Mine just connects to T-Mobile that I pay monthly for. Keeps a warehouse online.

Giordano Bruno 的头像
Giordano Bruno8 个月前

I don't get it? Your bypassing the modem? I just use a wave share 7060 with ESP32 and for SIM. Costs $30 and I have global HTTP, TCP, SMS connectivity. Is this just proof of concept ?

Cl0uddStrife 🛰️👾 的头像
Cl0uddStrife 🛰️👾8 个月前

This is so cool

Patrick 的头像
Patrick8 个月前

Is the device registered on a cellular plan? Also does it have a data plan?

Steve grins 的头像
Steve grins8 个月前

love this. reverse engineering these trackers is always a rabbit hole. did you have to wrangle AT commands or did it speak some weird custom protocol?

MrRobotMan 的头像
MrRobotMan8 个月前

Wait who pays the LTE bill?

TaffyByte 的头像
TaffyByte8 个月前

Really enjoyed this !

coleipleni 的头像
coleipleni8 个月前

You need t practice getting to the point far more quickly

Illuminated 的头像
Illuminated8 个月前

@CapeCellular esim usb?

☠️ 的头像
☠️8 个月前

Ok now that is freaking cool. For a newbie like me - do you care to explain the hardware/software tool chain you are using?

Pius 的头像
Pius8 个月前

Interesting

Sébastien B 的头像
Sébastien B8 个月前

@pbeyssac

相关视频