Hack Wifi from $1.80

Introduction

In this section, David Bombal introduces Kody Kinzie, a security researcher who specializes in Wi-Fi hacking and OSINT. Kody talks about his background and how he got into making educational hacking content.

Meet Kody Kinzie

• Kody Kinzie is a security researcher who has been making educational hacking content for four to five years.

• He specializes in Wi-Fi hacking and OSINT.

• He enjoys teaching beginners because he himself started as a beginner.

• Kody used to work for Null Byte but now makes content on the Hak5 channel and works at Varonis.

Starting with Null Byte

In this section, Kody talks about how he started making video content for Null Byte despite having no experience in hacking or video editing. He also discusses the challenges of producing content for little pay.

Making Video Content for Null Byte

• Kody started as a writer for the Null Byte website with no experience in hacking or video editing.

• Eventually, he convinced the company to let him make video content even though they thought it was too expensive.

• The videos eventually gained traction and had millions of views.

• One of their videos was taken down by YouTube which got some press attention.

• Varonis saw their content and offered Kody a job after Null Byte stopped ordering episodes from them at the beginning of the pandemic.

Moving On

In this section, Kody talks about moving on from Null Byte to make content on the Hak5 channel and work at Varonis.

Making Content on the Hak5 Channel

• Kody started making content on the Hak5 channel after Null Byte stopped ordering episodes from them.

• He now does live streams twice a week for Varonis.

Null Byte and Wi-Fi Nugget

In this section, the speaker talks about the end of Null Byte and how it led to better things. They also introduce their new project, the Wi-Fi Nugget, which combines their interests in Wi-Fi hacking and microcontrollers.

The Wi-Fi Nugget

• The Wi-Fi Nugget is a project that combines the speaker's interests in Wi-Fi hacking and microcontrollers.

• The speaker explains that they find Wi-Fi hacking interesting because it is universal but fragmented. They also mention that it is relatively easy to learn with a bit of background knowledge in networking.

• The speaker mentions that they took an electronics class in community college but found working with hardware alone uninteresting as a hacker. They explain that low-cost Wi-Fi enabled microcontrollers allow them to do basic stuff with Wi-Fi.

• The Wemos D1 Mini is an integrated module based on ESP8266 that costs around $1.80 on AliExpress. It allows users to send packets arbitrarily, including de-authentication packets or some new Wi-Fi attack that comes up tomorrow.

• However, there are limitations to what can be done with the Wemos D1 Mini due to its power limitations.

Alfa Adapters

• The speaker expresses their love for Alfa adapters and mentions having tested them before.

• No further bullet points available for this section.

Alfa Network Adapters

In this section, the speaker talks about the Alfa Network Adapters and their features.

The Tube-U

• The Tube-U is the most powerful wireless network adapter created by Alfa.

• It is designed for long distances and can be used for boats or buildings.

• It has a super long omnidirectional antenna that's like four or five feet long.

• It gets amazing distance and can receive packets from up to 5 miles away.

Parabolic Grid

• The parabolic grid is huge and ships folded onto one thing but can be broken out to twice its size.

• It looks like a lightsaber and has a parabolic grid that makes it incredibly large.

• It gets amazing distance, clocked at 5 miles for receiving packets with known locations in WiGLE Wi-Fi.

Testing the Tube-U

• The speaker tested the Tube-U using a parabolic grid in two phases.

• They were able to receive networks from downtown Los Angeles, which was around 5 miles away.

• They verified the location of these networks by feeding information autonomously into WiGle.net

and finding their geolocation.

• For actual interaction, they were seeing out to a little over a mile in order to have more interactive sessions.

Wireless Network Adapters

In this section, the speaker talks about different types of wireless network adapters.

NHA Adapter

• The NHA adapter only supports 2.4 gigahertz but is always been the easiest wireless network adapter to work with for the speaker.

• Its drivers are so good that every Linux tool you're going to want to try out on it will just work the first time.

• It is rock solid and simpler to use, making it the speaker's default adapter.

Panda Wireless Adapters

• While the speaker prefers Alfa as a brand, Panda Wireless has some dirt-cheap wireless network adapters.

• They are great and can do way more than Alfa's newer ones.

Wireless Network Adapters

In this section, the speakers discuss wireless network adapters and their preferences for them.

Preferences for Wireless Network Adapters

• One speaker had too many wireless network adapters plugged into their laptop.

• The speakers discuss their favorite operating systems for beginners and experts.

• One speaker prefers to use Manjaro because it is technically Arch but has a nice GUI over it.

• The other speaker prefers Ubuntu because it is easy to run experiments on.

Raspberry Pi vs Microcontroller

In this section, the speakers discuss the differences between a Raspberry Pi and a microcontroller.

Differences Between Raspberry Pi and Microcontroller

• A Raspberry Pi is a computer that can be plugged into a monitor, keyboard, and mouse. It runs an operating system and supports programming languages.

• A microcontroller is cheaper than a Raspberry Pi and can do specific tasks like Wi-Fi hacking or facial recognition.

• One speaker prefers to use cheap microcontrollers for hacking because they are anonymous and can be experimented with without worrying about breaking them.

Wi-Fi Nugget

In this section, the speakers talk about creating a cat-shaped packing tool called the Wi-Fi Nugget using microcontrollers.

Creating the Wi-Fi Nugget

• The Wi-Fi Nugget uses microcontrollers to perform all of its functions.

• The Wi-Fi Nugget can be made in small quantities without requiring a lot of money, unlike buying a large number of Raspberry Pis.

• The speakers can use the Wi-Fi Nugget to demonstrate all the cool things that microcontrollers can do.

Microcontrollers for Hacking

In this section, the speaker introduces two microcontrollers that are excellent for hacking. The ESP8266 is great for Wi-Fi hacking, while the ESP32S2 supports native USB and makes it perfect for USB hacking.

Introduction to Microcontrollers

• The ESP8266 is a $4 chip on AliExpress that has Wi-Fi and USB capabilities, making it an ideal tool for remote-accessible hacking.

• The speaker and his friend Alex created a cat-shaped board called the "Wi-Fi Nugget" that allows users to unlock the potential of a microcontroller in a handheld device.

• Microcontrollers can do all sorts of crazy hacking stuff, but they require plugging into a computer and speaking directly to them through command line applications.

• Stefan's Wi-Fi Deauther project turned the microcontroller into something accessible by pressing buttons and having a screen or connecting their phone with a web interface.

Features of Microcontrollers

• The Wi-Fi Nugget design has buttons, screens, NeoPixels, and outputs that allow users to connect it to other things. It can host web applications and be used in web pen testing.

• The S2 Mini is pin compatible with the D1 Mini module used in the Wi-Fi Nugget design.

Conclusion

• The speaker's tutorials on Null Byte provide a safe place for people to learn skills that could potentially lead to jobs or further interests.

Wi-Fi Nugget and USB Nugget

In this section, the speaker talks about the Wi-Fi Nugget and USB Nugget microcontrollers. The Wi-Fi Nugget can send arbitrary packets, create fake Wi-Fi networks, and be controlled with a computer or web interface. However, it cannot sniff packets beyond just the headers. The ESP8266 microcontroller on the Wi-Fi Nugget is capable of running Arduino or MicroPython. On the other hand, the ESP32S2 microcontroller on the USB Nugget supports CircuitPython.

Wi-Fi Nugget

• The Wi-Fi Nugget can send arbitrary packets and create fake Wi-Fi networks around you.

• It can be controlled with your computer or over Wi-Fi using a web interface.

• It cannot sniff packets beyond just the headers but still allows war driving to gather information about networks around you.

ESP8266 Microcontroller

• The ESP8266 microcontroller on the Wi-Fi Nugget is capable of running Arduino or MicroPython.

• MicroPython takes a little bit to get started with but once up and running, it's great for people who have some Python knowledge to start working with microcontrollers using an interpreted language rather than a compiled one.

USB Nugget

• The ESP32S2 microcontroller on the USB Nugget supports CircuitPython which is different from MicroPython as it's supported by Adafruit - a hardware company that provides amazing support for beginners wanting to get into hardware programming.

• CircuitPython allows you to plug in your computer, open up an editor and start writing Python directly onto it because it mounts as a USB drive allowing you to drag and drop stuff that you want to do on it.

O.MG Cable: A Journey to Bring a Physical Object to Market

In this section, the speakers discuss the O.MG cable and its features. They also talk about how they worked with Hak5 and MG to bring the product to market.

Features of the O.MG Cable

• The O.MG cable supports Linux, Mac OS, Android, iOS, and has a web interface.

• It can be connected remotely from any device.

• It allows users to run scripts live or select a script that is already saved.

Challenges in Bringing the Product to Market

• Alex and David did not have experience bringing a product to market before working on the O.MG cable.

• They worked with Hak5 and MG who mentored them through the process of buying microcontrollers, sourcing them, and mass producing them.

• There were pitfalls in scaling up production such as buying bad microcontrollers which resulted in 500 unsellable units.

• Responding to customer feedback was important for fixing bugs quickly.

Overcoming Design Flaws

• The screen of the modules was fragile so they designed and manufactured a 3D printed case that locked it underneath hard plastic.

• The buttons were broken out into a D-pad for convenience but not in a way that would cause components to get stuck or damaged.

Challenges Faced While Creating Physical Objects

In this section, the speakers discuss some of the challenges they faced while creating physical objects like 3D printed cases and digital circuits.

Challenges Faced While Scaling Up Production

• Every week felt like there was a new challenge when it came to scaling up production.

• Supply chain problems such as chip shortages caused delays in production.

• Making each cable took four hours with half being bad cables.

Importance of Loving What You Do

• Creating physical objects can be frustrating and time-consuming.

• It is important to love the people you work with and what you are doing in order for it to make sense.

• Without passion, it may not be worth the pain of spending all the money and time on a project that might not work.

The Wi-Fi Nugget vs. the USB Nugget

In this section, the speakers discuss the differences between the Wi-Fi Nugget and the USB Nugget.

Differences between the Wi-Fi Nugget and the USB Nugget

• The Wi-Fi Nugget is based on ESP8266 which is great at hacking Wi-Fi while the USB Nugget is based on ESP32S2 which has native USB and can do all these awesome USB attacks.

• The company that makes these microcontrollers was not super stoked about how popular they became for Wi-Fi hacking. So as soon as they realize that this is what so many people were just gonna keep doing, they locked it down. While you can do receiving with this, so theoretically you could grab like a Wi-Fi handshake. You can't do like a Wi-Fi deauthentication attack.

• Of course, you can run CircuitPython on it. You can do Wi-Fi stuff on it as well but there is one interesting limitation because of restrictions put in place by Espressif, the company that makes these chips.

Conclusion

In this section, the speakers conclude their discussion about the differences between the two nuggets.

Key Takeaways

• The big difference between the two nuggets is that Espressif has gone through trouble to lock down offensive WiFi capabilities from start in ESP32S2 chip making it less useful for offensive WiFi capabilities compared to older chip ironically.

• When making a product, have it do a very specific thing and advertise the coolest thing that it does and really forget about explaining what's inside the box.

Introduction to USB Nugget

In this section, the speaker introduces the USB Nugget and explains how it is beginner-friendly. They also discuss how easy it is to interact with the microcontroller using a browser.

Beginner-Friendly Microcontroller

• The USB Nugget is a beginner-friendly microcontroller that can be used for various projects.

• It eliminates the need for installing proprietary software on your computer.

• The ability to flash firmware over a browser makes it very accessible to new users.

Interacting with the Microcontroller

• The speaker's favorite way of interacting with the microcontroller is through a browser.

• Web Serial only supports Google Chrome at present.

• You can hit the reset button on this microcontroller, plug it in, and automatically flash whatever binary you want on it.

• Switching between projects is as easy as holding down the reset button, plugging it in, going to a web URL, and selecting the firmware that you want to put on the microcontroller.

Using USB Nugget for Ethical Hacking

In this section, the speaker discusses how USB Nugget can be used for ethical hacking. They explain how simple it is to learn Python and Arduino while doing hacking type stuff.

Learning Ethical Hacking with USB Nugget

• The USB Nugget can be used by people interested in ethical hacking who want to learn about microcontrollers like Arduino.

• It's an adult Lego set that allows beginners with no knowledge of programming or electronics to come in and make prototypes.

• You can start by learning some Python and Arduino while doing hacking type stuff.

Making Prototypes

• With CircuitPython support, you can plug into them easily and make prototypes without needing any prior knowledge of programming or electronics.

• You decide what your prototype will be; it can be something as simple as an LED strip that follows you with the light above.

Conclusion

In this section, the speaker concludes by summarizing how USB Nugget is beginner-friendly and accessible to new users. They also discuss their system of creating prototypes using CircuitPython.

Beginner-Friendly and Accessible

• The USB Nugget is very beginner-friendly and accessible to new users.

• It eliminates the need for installing proprietary software on your computer.

• Flashing firmware over a browser makes it very easy to use.

Creating Prototypes with CircuitPython

• The speaker creates a rough prototype of something they want to develop as a feature or a new product using CircuitPython.

• Alex deconstructs the code and turns it into something much cleaner that uses the resources of the microcontroller better.

• People can directly flash the binary file onto their board or open up the CircuitPython code and change stuff to make their own version.

Microcontrollers and CircuitPython

In this section, the speaker talks about microcontrollers and CircuitPython. They discuss how microcontrollers can be used to create unique projects and how CircuitPython makes it easy for beginners to program them.

Using Microcontrollers as Lego Blocks

• Microcontrollers allow you to come up with new ideas by using code examples on CircuitPython.

• You can use different components like passive infrared receivers to trigger your device.

• You can treat microcontroller components like Lego blocks and plug them into each other to create something unique.

Benefits of Using CircuitPython

• With a little bit of interpreted language knowledge, you can make a big dent in a hardware project using CircuitPython.

• The Wi-Fi Nugget and USB Nugget are great places for beginners to start because they have well-supported chips with many different ways of using them.

• There are many examples out there of people doing similar projects with great code examples and lots of community input.

Differences Between Arduino and CircuitPython

• With Arduino, you have to plan out what you want to do beforehand or it won't work. With CircuitPython, you can change your mind in the middle of programming without difficulty.

• Python lets you get away with some funky stuff that beginners tend to do. For encouragement, feel free to use bad habits sometimes when programming prototypes.

Choosing Between Wi-Fi Nugget and USB Nugget

In this section, the speaker talks about choosing between Wi-Fi Nugget and USB Nugget.

Choosing Between Wi-Fi Nugget and USB Nugget

• If you want to do Wi-Fi hacking attacks, choose the Wi-Fi Nugget. Otherwise, choose the USB Nugget.

USB Nugget: The Ultimate Hacking Tool

In this section, the speaker talks about the USB Nugget and why it is their favorite product at the moment. They discuss its features and how it can be used for a variety of applications beyond offensive hacking.

Features of the USB Nugget

• The USB Nugget is easy to use and has many features that make it a great tool.

• It plugs into CircuitPython and Adafruits environment easily, making it a versatile product.

• It can be used for teaching programming or creating fun projects like weather stations using sensors and NeoPixel strips.

Availability of the USB Nugget

• The speaker mentions that they have sold 250 units on Hak5 so far, with another batch of 500 coming soon.

• They suggest signing up for email alerts from Hak5 to know when the next batch will be released.

• The USB Nugget can also be purchased on hakcat.com.

Supporting the Creators

• The speaker explains that they do not have a Patreon but would rather people support them by buying their products like the USB Nugget.

• They put a lot of work into creating hardware that is easy to use and comes with guides for learning along with them.

Learning Resources

• The speaker suggests checking out their website hakcat.com for purchasing options as well as resources on how to use their products.

• There are no other specific learning resources mentioned in this section.

Cyber Weapons Lab LA Meetup Group

In this section, the speaker talks about the Cyber Weapons Lab LA meetup group and how it can be accessed virtually.

Accessing Cyber Weapons Lab LA Meetup Group

• The Cyber Weapons Lab LA is a meetup group that offers in-person meetups and online training sessions.

• The online training sessions are live, allowing participants to ask questions and receive feedback.

• The speaker mentions that people from different time zones might have to adjust their schedules accordingly.

• The meetup group aims to provide thorough classes on topics such as Ducky script and Wi-Fi remote interface.

Free Content and Workshops

In this section, the speaker discusses free content available on Hak5, workshops at HOPE Conference in New York, and weekly Q&A sessions.

Free Content on Hak5

• Hak5 is where most of the best free content around Nugget will be available.

• The speaker mentions that they make as much free content as possible for those who buy their product.

Workshops at HOPE Conference in New York

• A talk called "$5 Cyber Weapons and How to Use Them" will be presented at the HOPE Conference in New York.

• A workshop will also be held at the conference; however, its nature has not been decided yet. It could either be a soldering workshop or a CTF.

Weekly Q&A Sessions

• SecurityFWD channel hosts a weekly "Hacking With Friends" show where live Q&A sessions are conducted every week.

• Participants can ask any Nugget-related question during these sessions.

Advanced Classes and Online Training Sessions

In this section, the speaker talks about advanced classes offered by Cyber Weapons Lab LA meetup group and online training sessions.

Advanced Classes

• Cyber Weapons Lab LA meetup group organizes advanced classes for those who want to learn more about the topic.

• The speaker mentions that they prefer organizing these classes in person and supporting local hacker spaces.

Online Training Sessions

• Due to an increase in the number of people buying Nuggets, online training sessions are being organized.

• These sessions will allow participants to hang out with the speakers, share their experiences, and learn new things.

• Participants can also attend the weekly Q&A sessions on SecurityFWD channel if they have any questions.

Learning from Kody

In this section, the speaker talks about how to learn from Kody and where to find him.

How to Learn from Kody

• Subscribe to his YouTube channels.

• Follow him on Twitter.

Where to Find Kody

• Visit hack.gay for a map of where his content is located.

Creating Something Worthwhile

In this section, the speaker talks about the satisfaction of creating something worthwhile.

The Value of Working with Friends

• Even when there are setbacks, working with friends on projects that you would do for free anyway is worth it.

The Satisfaction of Accomplishing Something

• Getting into the thick of things and really accomplishing something by working with people you admire is more satisfying than doing what lazy rich people do.

The Coolest Thing Ever Done

• Creating something that total beginners think is wildly cool is probably the coolest thing ever done.

Pandemic as a Unique Experience

In this section, the speaker talks about how the pandemic has been a unique experience and how it has forced him to focus on a new project.

A Wake-Up Call

• The pandemic has been a wake-up call that he should have tried making something earlier because the payoff for when you hit on something that works is so much fun.

Focusing on New Projects

• Instead of doing content, he focused on a new project which was technical and hardware-based like constrained by supply chain stuff.

Always a Beginner

In this section, the speaker talks about how he always sees himself as a beginner and how making content is being able to take other people along the journey of being an amateur.

A Beginner

• He has always seen himself as a beginner.

Sharing Knowledge

• He loves learning and is happy to share it with other people who are on the same journey.

Never an Expert

• He never feels like an expert and always feels like he has so much more to learn. The point of making content is being able to take other people along the journey of being an amateur to at least somebody that has something else to share in terms of experience.

Keep on Learning

In this section, the speakers talk about how important it is to keep on learning.

Humbled

• Every day you learn and every day you feel that you know nothing.

• If you get to the point where you feel like you know everything, then you've lost it because you've got to just keep on learning.

Cyber Industries Can Be Interesting

• People are not always the nicest and friendliest in cyber industries which is sad but true.

The Importance of Not Making Your Job Your Whole Personality

In this section, the speakers discuss how people can feel threatened by others' success and how it can be scary for people who feel like being a master of one particular subject is what makes them who they are. They also talk about the importance of not making your job your whole personality.

Don't Make Your Job Your Whole Personality

• You can't make your job your whole personality. This is definitely my passion but there's so many other things that I love that make me who I am.

• It's hard for new people sometimes to tolerate abuse from nowhere, but you make such good friends that it doesn't matter.

• Any content creator gets hate, you gotta ignore it.

• There's always an 18-year-old kid that knows more than you in some field, so you just gotta do the best you can.

Having Fun During Interviews

In this section, the speakers talk about having fun during interviews and share some funny moments they've had on set.

Funny Moments During Interviews

• My favorite thing to do on the set of Null Byte was to take a giant swig of water, choke on it after we've gotten everything set up and then cough for 10 to 15 minutes while everyone waits for me. (David laughing)