312-50V11 · Question #1005
Clark, a professional hacker, attempted to perform a Btlejacking attack using an automated tool, Btlejack, and hardware tool, micro:bit. This attack allowed Clark to hijack, read, and export…
The correct answer is C. btlejack -d /dev/ttyACM0 -d /dev/ttyACM2 -s. The Btlejack command using multiple -d device flags with the -s option synchronizes multiple micro:bit hardware devices to lock onto and hijack an active BLE connection.
Question
Clark, a professional hacker, attempted to perform a Btlejacking attack using an automated tool, Btlejack, and hardware tool, micro:bit. This attack allowed Clark to hijack, read, and export sensitive information shared between connected devices. To perform this attack, Clark executed various btlejack commands. Which of the following commands was used by Clark to hijack the connections?
Options
- Abtlejack-f 0x129f3244-j
- Bbtlejack -c any
- Cbtlejack -d /dev/ttyACM0 -d /dev/ttyACM2 -s
- Dbtlejack -f 0x9c68fd30 -t -m 0x1 fffffffff
How the community answered
(53 responses)- A4% (2)
- B19% (10)
- C70% (37)
- D8% (4)
Why each option
The Btlejack command using multiple -d device flags with the -s option synchronizes multiple micro:bit hardware devices to lock onto and hijack an active BLE connection.
The `-j` flag in `btlejack -f 0x129f3244 -j` is used to jam a BLE connection by disrupting it, not to hijack and read its traffic.
`btlejack -c any` passively listens for and captures new BLE connection setup advertisements to identify access addresses and connection parameters, it does not take over an existing session.
The command `btlejack -d /dev/ttyACM0 -d /dev/ttyACM2 -s` instructs Btlejack to use two micro:bit devices in tandem via the `-d` flags, with `-s` enabling synchronized sniffing and takeover of an existing Bluetooth Low Energy connection. Using multiple hardware devices is required to reliably follow BLE frequency hopping sequences, which is the prerequisite for hijacking an established connection and reading or exporting its data. This multi-device synchronization is what differentiates hijacking from passive sniffing of new connections.
`btlejack -f 0x9c68fd30 -t -m 0x1fffffffff` follows an existing connection using an access address, timing information, and a channel map, and is used for passive data export rather than active connection takeover.
Concept tested: Btlejack BLE connection hijacking command syntax
Source: https://github.com/virtualabs/btlejack
Topics
Community Discussion
No community discussion yet for this question.