Maxine Filcher - BLE Security and GATT Exploitation
Training description:
Combining past BLE talks and workshops into a comprehensive 2-day course,
aimed at giving pentesters and security professionals hands-on experience
with BLE security and GATT exploitation. This course hopes to give
students a better understanding of the BLE protocol and the security
issues that can be found in everyday products and devices.
Student skill level:
Intermediate, students should be comfortable with Linux and Wireshark.
Course overview:
Day 1
1. The Basics of BLE
2. Introduction to GATT
3. Nordic nRF 52840 Dongle & DK
4. RPi with Lineage OS
5. Firmware and Software install
6. Nordic BLE Sniffer for Wireshark
Day 2
7. Scanning Operations
8. Enumerating Targets and Services
9. Conducting Attacks Part 1
10. Conducting Attacks Part 2
11. Open BLE CTF /
12. BLE CTF Wrap Up and Class Questions
What should students bring to the Training?:
- An android device.
- Laptop with Linux
- Raspberry Pi 4 with 32GB+ Micro SD card
Bio:
Freqy is a security engineer and researcher with a particular interest in
wireless technologies like BLE, ZigBee, Wi-Fi, etc. She has spent the past
few years working with companies to help improve the wireless security of
devices found in millions of homes and businesses.
Trainer(s) social media links:
https://twitter.com/freqyxin
DATE:Aug 15th to 16th 2022
TIME:9am to 5pm PDT
VENUE:Caesars Forum Ballroom
TRAINER:Maxine Filcher
- 16 hours of training with a certificate of completion for some classes
- COVID safety: Masks required for indoor training
- Note: Classes that do not meet their minimum class size by July 15 will be canceled, please register early
- Note: Food is NOT included