Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Zwave turn on the light #4

Open
wants to merge 5 commits into
base: main
Choose a base branch
from
Open

Zwave turn on the light #4

Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
a49b734
Create ESPNow_Sniffing
lozaning Apr 22, 2024
2b7eb81
Create IoT Device RCE
lozaning Apr 24, 2024
ffe0e33
Delete IoT Device RCE
lozaning Apr 25, 2024
0df4d14
Delete ESPNow_Sniffing
lozaning Apr 25, 2024
8c86684
Create Z-Wave light
lozaning Apr 25, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 14 additions & 0 deletions Z-Wave light
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
Challenge Name: Turn on the Light

Hardware required to run the challenge: A smarthome controller/hub with a zwave radio, and two z-wave light bulbs (I can give you all of these)

Flags: Players will be given a flag to enter into the scoreboard after demonstrating that they can turn on a z-wave connected smart light


Software Setup: There is an automation running on the smart home hub/controller that switches one of the lights on and off every 15 minutes. The other light is connected to the hub/controller as well, but no automations are configured for it. It is this light that players must demonstrate their ability to turn on.

Flag Rolling procedure: I think if you tear down and reset up a z-wave network using Home Assistant, you'll end up with a different Home-ID, which would require players to recraft the appropriate packet they send to control the light

potential methodologies to capture the flags:
Player might try using a z-wave dongle flashed with firmware to enable monitor mode, and then anylyze the information observed in the commands sent to the bulb configured with the on/off automation
Player then might examine the variuous z-wave command types and then manually craft and send a packet that would result in the un-automated light turning on.