Hardware Hacking: T-Embed for Ethical Hackers

Introduces t-embed firmware options beyond default, compares web ui and flasher installation, introduces Bruce firmware and configuration, and outlines themes including creating your own theme, wifi, rfid, and ir sections.

Explore three popular firmwares for T-Embed—firmware, Capybara Zero, and launcher—covering device support, features, and NFC/RFID edge, with hands-on installation via web UI.

Install brus firmware via the web ui by selecting the device, erasing data, and holding the boot button to flash, with notes on capybara firmware and the upcoming flasher method.

Learn how to install firmware using a flasher tool, download the flasher and bin files for the ESP32-S3 device, flash Bruce or Capybara firmware, and verify a successful boot.

Discover Bruce firmware options and a roadmap of features, from Wi-Fi and access points to RFID, IR, GPS, and RF modules, plus device scanning and bad USB.

Configure brightness, dim time, screen orientation, ui colors and themes, instant boot, led wheel, wifi, sd card, and power options like deep sleep, turn off, factory reset, and clock settings.

Explore Bruce firmware resources, including the forum, wiki, and downloadable infrared, NFC, and SD card files, and learn to configure the web UI, SD card setup, and themes.

Explore theme options by downloading, extracting, and installing dark mode themes, then apply them via the wifi-connected device's web UI and SD card upload.

Create a custom theme with theme builder on Bruce site, using red colors and 320 by 144 images for Bluetooth and Wi‑Fi, then download, upload via SD card, and apply.

Explore basic Wi‑Fi attacks, including beacon spam with fake access points, random SSIDs, and authentication floods, and learn to recognize and mitigate these attack techniques.

Demonstrates a targeted wifi attack simulation, including clone portal attacks, fake access points, and evil portal pages, while emphasizing authorization and ethical considerations.

This lecture explains evil portal attacks that deploy fake access points and custom portals to trick users into entering credentials on shared networks, with hotel and cafe examples.

Demonstrates using a raspberry pi zero based Rousseau device to capture four-way handshakes for wardriving and cracking WPA2 passwords with Hashcat through handshake analysis.

Explore post-networking attacks after gaining access, including host scanning, opening ports, SSH access, deauthentication, and ARP spoofing to capture traffic with pcap files for analysis.

Explore additional wifi tools in the team bet suite, including TCP server/client, Telnet, SSH, DPO, and raw sniffer with pcap; learn WireGuard VPN setup and config-based evil portal naming.

Compare T-Embed and Flipper Zero on wifi capabilities, noting T-Embed's built-in ESP32 versus Flipper Zero's external ESP32 with Marauder firmware and post-attack options including host scanning.

Explore basic ble attack vectors, including media commands, ble scan to discover nearby devices, beacon frames via ibeacon, and spam attacks on Windows, iOS, Samsung, and Android.

Demonstrates bad BLE HID attacks with a t-embed masquerading as a USB keyboard to deliver keystrokes, payloads, and scripts, including fake update commands, on PC and phone.

Compare the Bluetooth attack capabilities of T-Embed and Flipper Zero, showing both support the same attack types, including spam attacks, and conclude they are similar.

Explore infrared with t-embed, understanding infrared as electromagnetic radiation and how data transmits via infrared light. Learn to transmit, record, and clone remote signals to access IR-based systems using templates.

Demo demonstrates infrared signals with prerecorded and custom ir files on an sd card to control tv remotes and ac units, including quick remote setup, recording, saving, and replaying signals.

Explore how infrared jammers disrupt remote signals by adjusting frequency (38 kHz, 40 kHz), switching modes (basic, sweep, random, empty), and modulating power and speed to test infrared devices.

Compare IR features of t-embed and flipper zero; flipper zero has more IR data and broader device support, while t-embed offers IR capability with less data.

Introduces RF fundamentals, from 3 kHz to 300 GHz, explains spectrum use, and how the CC 1101 transceiver captures, transmits, and decodes signals across multiple ranges.

Capture and replay raw rf frequencies through hands-on demonstrations, recording and transmitting frequencies, and exploring spectrum, square-wave spectrum, and spectrogram views for wireless devices.

Decode infrared frequency signals to reveal the data behind each button, capturing and decoding codes, and replay frequencies to turn devices on and off.

Explore RF signal disruption by capturing, replaying, and decoding frequencies, then demonstrating how a jammer targets a specific frequency to affect a doorbell and other RF devices.

Compare T-Embed and Flipper Zero on sub gigahertz radio frequency capabilities, showcasing capture and replay attacks and T-Embed's ability to decode frequency for a slight edge.

Explore human interface devices and how bad USBs mimic keyboards or mice and run preloaded scripts, bypassing antivirus protection to harm the victim system.

Explains custom HID scripts and syntax for basic vectors, illustrating automation of date/time changes, wallpaper updates, and website actions using scripted payloads on targeted devices including bad USB workflows.

Explore how reverse shell code creates covert remote access on a victim Windows 11 machine using PowerShell, ngrok, and netcat, with a Kali attacker setup.

Compare T-Embed and Flipper Zero in HD, highlighting that both devices can perform HD attacks and support bad USB.

Explore how NFC and RFID differ in distance, range, and purposes. NFC enables two-way, secure communication for mobile payments and device pairing, while RFID supports broader tracking and access control.

Read RFID cards with t-embed, capture UIDs, clone UIDs, and save data to a file while exploring magic cards that can bypass RFID security.

Explore an RFID simulation that tests valid and invalid cards, demonstrates cloning to bypass simple security, and introduces block-based methods to secure RFID systems.

Build a basic NFC reader with an Arduino Uno and PN532, an OLED display, breadboard, and buzzer; read and validate uids with simple code, then explore bypassing security with Flipper Zero.

Explore the NFC capabilities of team bet by reading EMV card data via RFID and NFC, noting card type and UUID, and compare with Capybara firmware and Flipper Zero.

The lecture compares the TI embed with Flipper Zero, demonstrates reading an NFC card and saving or emulating its data, with attention to potential security risks in POS systems.

Compare NFC features of T-Embed and Flipper Zero, noting Flipper Zero's advantage in NFC attack types, and consider future Team Bet capabilities with capybara firmware and affordable protection covers.

Connect the t embed to a gps module using a four-pin gst cable, power from 3.3v and ground, and wire gps pins 43 and 44 to board’s rx and dt.

Connect the GPS module to the team bed by wiring ground and vcc, connect pin 44 to the module's TX and pin 43 to RX, then monitor wardriving updates.

Explore the NRF24L01 module for the T-Embed, its 2.4 GHz jamming capabilities, and current hardware soldering challenges plus software limitations that restrict attacks.