ucsb-seclab / diane

DiAne is a smart fuzzer for IoT devices
38 stars 7 forks source link

Can diane test a router? #5

Open 5erua opened 1 year ago

5erua commented 1 year ago

While the sniffer needs a rooted router, how do I set up the environment to test a router?

badnack commented 1 year ago

We have never tried such a case, but I am not sure why testing a router would be different from other IoT devices. Could you be more specific about where you're experiencing issues?

On Sat, 12 Nov 2022 at 05:56, 5erua @.***> wrote:

While the sniffer needs a rooted router, how do I set up the environment to test a router?

— Reply to this email directly, view it on GitHub https://github.com/ucsb-seclab/diane/issues/5, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAH5GZB2ZDEFQ2TM3CRWNTDWH6OYPANCNFSM6AAAAAAR6KU4MI . You are receiving this because you are subscribed to this thread.Message ID: @.***>

-- Nilo Redini, Ph.D.

Website: www.badnack.it Twitter: badnack

5erua commented 1 year ago

When I tested a huawei router, I found that many interaction instructions between the mobile APP and the router required the APP to connect directly to the wifi of the tested router. However, I did not have the shell of the tested router, so how should I sniff the traffic of the router?

------------------ 原始邮件 ------------------ 发件人: "ucsb-seclab/diane" @.>; 发送时间: 2022年11月16日(星期三) 凌晨2:01 @.>; @.**@.>; 主题: Re: [ucsb-seclab/diane] Can diane test a router? (Issue #5)

We have never tried such a case, but I am not sure why testing a router would be different from other IoT devices. Could you be more specific about where you're experiencing issues?

On Sat, 12 Nov 2022 at 05:56, 5erua @.***> wrote:

> While the sniffer needs a rooted router, how do I set up the environment > to test a router? > > — > Reply to this email directly, view it on GitHub > <https://github.com/ucsb-seclab/diane/issues/5&gt;, or unsubscribe > <https://github.com/notifications/unsubscribe-auth/AAH5GZB2ZDEFQ2TM3CRWNTDWH6OYPANCNFSM6AAAAAAR6KU4MI&gt; > . > You are receiving this because you are subscribed to this thread.Message > ID: @.***> >

-- Nilo Redini, Ph.D.

Website: www.badnack.it Twitter: badnack

— Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you authored the thread.Message ID: @.***>

badnack commented 1 year ago

I understand what you mean now, and yes, the IoT device in analysis should be connected to the router used by Diane. Unfortunately, at the current state, DiAne does not provide capabilities to fuzz routers, unless the router itself allows you to connect it to a second router. I am positive that DiAne could be extended to offer such capabilities, but in its current state they are not present out of the box.

On Tue, 15 Nov 2022 at 21:14, 5erua @.***> wrote:

When I tested a huawei router, I found that many interaction instructions between the mobile APP and the router required the APP to connect directly to the wifi of the tested router. However, I did not have the shell of the tested router, so how should I sniff the traffic of the router?

------------------ 原始邮件 ------------------ 发件人: "ucsb-seclab/diane" @.>; 发送时间: 2022年11月16日(星期三) 凌晨2:01 @.>; @.**@.>; 主题: Re: [ucsb-seclab/diane] Can diane test a router? (Issue #5)

We have never tried such a case, but I am not sure why testing a router would be different from other IoT devices. Could you be more specific about where you're experiencing issues?

On Sat, 12 Nov 2022 at 05:56, 5erua @.***> wrote:

> While the sniffer needs a rooted router, how do I set up the environment > to test a router? > > — > Reply to this email directly, view it on GitHub > <https://github.com/ucsb-seclab/diane/issues/5&gt;, or unsubscribe > < https://github.com/notifications/unsubscribe-auth/AAH5GZB2ZDEFQ2TM3CRWNTDWH6OYPANCNFSM6AAAAAAR6KU4MI&gt;

> . > You are receiving this because you are subscribed to this thread.Message > ID: @.***> >

-- Nilo Redini, Ph.D.

Website: www.badnack.it Twitter: badnack

— Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you authored the thread.Message ID: @.***>

— Reply to this email directly, view it on GitHub https://github.com/ucsb-seclab/diane/issues/5#issuecomment-1316361466, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAH5GZABQGL47JK5UY3YCN3WIRURVANCNFSM6AAAAAAR6KU4MI . You are receiving this because you commented.Message ID: @.***>

-- Nilo Redini, Ph.D.

Website: www.badnack.it Twitter: badnack