KNOW THIS ABOUT THE FLIPPER ZERO...
Вставка
- Опубліковано 26 вер 2023
- I've wanted a flipper zero for a while but due to the hype on socials when they came out they were unavailable for a while. The Flipper is a radio frequency multi tool and is a great bit of kit for HAM radio enthusiasts and others wanting to learn about radio control systems. In this video I put it to the test and dispel a few myths that I see regularly on social media.
If you do get a Flipper after watching this video please use it responsibly. Don't be a dick!
flipperzero.one/ - Авто та транспорт
I use my flipper as a universal remote, 2 factor authentication, gift cards, all kinds of stuff. It also helps me test my friends cyber security. The best bud and his wife also had an NFC card but they wanted 2, so I copied it and wrote it on a backup I had lying around. It's really just a digital swiss army knife, it's all about how it is used.
gift cards?
@@harolds1 IO boards can do a lot of stuff, but I just like fiddling with cards I get that I dont intend to use, or that have little money left on them =]
"Don't be a dick - learn to hack properly - and I'll catch you next time" 😂
Great outro 👊😂
🤣👍🏼
Great to see another Brit taking on FZ - well done, Andy! While you've provided a brief overview of some key features, I'm always down for delving deeper into the details - Ace.
Your channel is my favourite Ace
For me, it's worth it for the IR analyser alone and way more useful than a detuned AM radio which is what I normally have to use to check remote control faults.
Thank you Andy for all of this valuable information. I've been out of the tech game for a while but this device got me back in and I've realized how out of date I am, Even though it's just 6 years, it's practically an eternity in tech world. I'll definitely be watching everything you got, just to learn.
Yeah it is a great tool and totally agree with the Freq anaylser. Find it useful for checking the harmonics on the the 2m band - clearly though you can't seem anything other than say the 3rd but its a start. Also use it for work too, great for pen-testing things.
it's a start
@@NoName-zn1sb yeah, the flipper can do so much it's a great start. Then when you realize "wow, I really like the frequency analyzer" or "wow I like the IR decoder/transmitter" then you can research and build or buy a dedicated device to learn more and take it to the next level
It's great that you've done a video about this. 2.4 has a better range.
Quite a good little device with some really good uses.
Love your channel, great stuff!
I was too lazy to read up on these but your video cleared it all up for me mate nice one flippersby
Thanks rog!
Great to see another one
also so fantastic and usefull for all
I use mine at Dave and Busters. The kids have wrist bands that I've cloned so I can play games using their credits. If a person was unscrupulous they could clone the employees tag and play for free but the tickets would go on the employees account. Or a person could play the games that drop cards and plastic chips.
I've had one for nearly a year, I used it to mess with airCOn ( i like it cold ), and mess with some entry tag stuff I have the tags for anyway, I haven't touched it for 9 months odd. Doing a clear up and found it, hoping to find a good project. Looks like I found a good channel for CB radio anyway
Brilliant fun these Flippers…Good Video and have a Sub👍
Thanks and welcome!
Great piece a kit Andy
Can the Flipper Zero be used like a universal remote control for airconditioners? Currently I have a universal remote but you have to look at a book with the brand name and then choose from numerous possible numbers to be able to control it.
Yes it can
Whats the range of the frequency capture?
Is everything you showed us with the standard firmware or custome firmware like xtreme?
Standard
the best advice there right at the end; learn to hack properly. and if you need an incentive, qualified cybersecurity specialists are some of the most in demand in loads of industries right now.
Using this to hack is like trying to chop wood with a penknife. A cheaper axe will do the job more efficiently.
@@ScandalUK exactly. just use it as a learning tool to better understand the tech around you, and what only might be exploitable if you understood it better. spectrum analyser for example? tidy, scan shit, understand what freqs are in use and for what, then see if you can even break apart those broadcasts to understand in even more detail. or nfc - and btw, this thing is NOT going to steal your passport creds despite msm's best efforts to say otherwise. honestly, if you're that close to a passport, just open it up and take a f*cking photo 😄
@@brymstoner love the analogy!
Great review. Love my Flipper :)
Hi can the flipper listen to audio at nabours and inside cameras aswell as doorbell in the home and Alexa ect can they go through yu phone take photos video from yu mobil ?
I'm an ethical hacker and cybersecurity cloud architect and you nailed it. Great video! 73, K4HEF
Thank you 👍🏼 appreciate that.😁
In this day and age ethics went out the windiw ,peace ,
You must also have high estrogen levels?
I'd advise people against using the Flipper to clone your vehicle fob. Even if you can use it to open your car, your fob will now go out of sync. It'll be on the wrong part of the table of "correct codes" based upon the random seed that is synced between your car's SCU and the fob. Suffice it to say, if it manages to work once, your fob will then be rendered useless and you'll need dealer-level diagnostics to reset the vehicle's SCU and reprogram the fob.
Yes this is what I said in the video.
@@andykirby Ah frap, sorry! I must've missed that while typing. Thanks for the video. Was cool. :) Might have to get one of these things.
I've heard this many times but have yet to hear about someone actually desyncing. I'd be interested in seeing real world cases of this
@@andykirbyHow do you clone the key fob for opening flat security doors?. They only gave me one to open the main door. Will this device be able to clone that?
Wow, £252.99 it's not cheap.
3:50 there are so many places you can still use cards without the 3 digit security code, online maybe not useful, but at stores when purchasing, most debit machines that let you put in numbers dont actually need a code, most give 2 options, is customer there? if yes, then you dont need a code, and can make the payment and give receipt, if they arent, then you need the code, but in training for a lot of places, they just dont get you to bother and use the option where you dont use code, mainly for dealerships and clientel type places.
are you sure about that saying you cant use long card number and date to make payments i pay my grocceries man by saying my card number and date and he presses the customer present yes button on his mobile card reader and the payment is autherised if your in a store you do haver to manually type in your 3 digit code but dosnt that flipper send out the chip and pin card detail for swiping
900Mhz could be your phone it's picking up, also you'll have phones on the 700-800Mhz band depending on what network you're on, nice vid :)
how do you add the mass pointer to the android phone
What firmware di you use in this video pls? THX
There are custom firmwares for the Flipper that support rolling code protocols tho, right?
I think so but it's not easy or something I'm really interested in.
yup.. I have tried all of them but always end up going back to Xtreme for my every day firmware! happy hacking! Rolling codes are definitely supported on the aftermarket firmwares
google pay requires your fingerprint to enable pay. also it is not your credit card number that is transmitted on the phone, the phone gets a list of around 12 generated numbers when you are connected to the network for your card. so it will still work about a dozen times when you are without cell or wifi service. im sure apple does this similarly.
not sure about apple pay but i do know samsung pay lets you do up to 12 off network transactions like you mentioned as well.. Samsung Pay is kind of neat though because it can transmit your magstripe data to regular old stripe readers similar to how Magspoof(which Flipper Zero also does and with a Rabbit Labs magspoof board I can report it works GREAT;-)) does... back when this first started being an option on Samsung phones depending on the type of card it would straight up spoof the track data and push it out wirelessly JUST like a magspoof.. I am sure it must either push out the generated number or use a different one on each encrypted transaction these days but I am not certain..
@@SUPERNINTENDOHALMERZ I think it uses a different number each transaction, as I tried to return something at a Target I bought with Google Pay, and they asked for the card to return the money to so I gave them the physical card and it did not work. They showed me the card number they had and it was generated. Then they had me phone tap again to do the return and that worked.
@@SUPERNINTENDOHALMERZnewer Samsung phones don't do the magnetic strip thing anymore. Basically they purchase loop pay
Do not use this with car fob keys , you will block the fob and lose the ability to unlock lock your car , the car uses rolling key codes , and A NEW KEY FOB COSTS A LOT OF MONEY , DO NOT USE THIS IN YOUR CAR .
Flipper can handle rolling code and I've never heard of or seen a fob getting bricked.
Great informative video!
I actually wanted to turn ON the air conditioner at a laundromat here in southern France during a quite hot summer, and got a AC remote control app on my Galaxy S5 phone, which has a IR transmitter.
But I didn't manage to do it as this AC unit was of a unknown, possibly cheap brand.
It works great on my LG one though as well as on TVs and projectors.
I've been an LG guy ever since the Optimus LG G Pro, and I was really bummed when they took out the remote. Crushed when they quit phones altogether
Same here with Galaxy S6.... The IR blaster was the coolest thing ever! And there was an app I think called "Peel Remote" which let you make custom remotes for different devices. Of all the new technology we have Idk why they havent reintroduced it to a newer phone.
I remember when my LG phones have an IR blaster so you can control TVs I think even when my Sony Emerson phones had it too but at the time I didn't realize it didn't download the app to get to do anything
I have a iscooter ix3. Ive seen people say you can cut a chord and remove the speedo limiter. Any idea if this is true? Id like to hear some actual info.
Got one of these as someone kept turning our display off with theirs at work lol, Now the thing with radios.. I work security is there a way they can jam our radios from working or anything bad like that with this tool? If so is there a way to combat this?
No
You can buy a small radio transmitter that will only transmit a small distance and override the signal. They are small and cheap, but interfering with radio signals is a crime
Yes, there's many ways to combat frequency jamming, but these devices don't go very far, so it should be easy to spot the person using it or traingulate the signal.
Traingulation chop choo
This is cool! So do you think this can or could be made to pick up something like a wireless 5.8ghz video signal strength, in the RF spectrum analyzer you were mentioning? I would like to test for signal strength output. But also to maybe to scan the area beforehand to find the cleanest section of the Band to use. The video band i usually use goes from 5696mhz to 5915mhz, with 8 equal "channels" or steps in between that for max separation. Its the wireless video signal from my drone.
Also i forgot i also have the controller side of it too which now uses some slightly more advanced hardware and software than just 2-3 year ago. To go from 0.5-3 miles of range, to getting 15-20 miles of range in decent conditions all of a sudden, and 50 miles in ideal testing, like a lab.
But a common easier testing method i see for that now is using something like the Salt Flats, i guess because of how flat and unstructured the land is for for miles, so theres nothing in between you. They got a new DJI Drone out to like 15+ miles out there with a new model doing a range test for the new DJI O4 transmission system works with the new remote and video setup. That uses a combo of 2.4ghz and 5.8ghz. 5.8g is the video basically.
For the Remote Control in both 800/900 mhz or 2.4ghz for the RF frequency used for each type. The common types to use now are Crossfire or ELRS. But there's a few more that are super focused on low latency at relatively close range for competitive racing usually.
you would need to make or get an addon board for this.. similar to the WIFI dev board etc... but yeah it can be done
The nice thing about opensource stuff like this is that if you wanted it to be a thing you could make it (granted you'd have to know a bit about electronics and a bit of programming, but still), though someone probably already has
Great video andy thankyou for explanation i know your hiding a lot what this can do as your a gentleman not a criminal 😊
I want this since I have a lot of 2.4GHz devices and their dongles and no matter what none of them seem to match up to each other. So... want to reprogram the receivers to work with the devices or clone receivers for devices I do like and don't want to go hunting for another receiver.
I’ve got a flipper and tried it on my Bank Card and it doesn’t take all the details. I don’t know if my bank card has an extra layer of security but I’d say it doesn’t work on all card.
It’s been pretty handy to have one remote for all devices. I like the mouse Jiggler 😅
The Tesla charger port automatically closes after a few minutes too, so no major concerns there.
yeah... not going to get access to any of the really useful data from a bank card via flipper.. I have a magspoof board that can be pretty fun for playing around with some stuff like that.. for me the Flipper is a convenient starting place for developing apps and gadgets with esp32 boards and such mostly.. some harmless pranking fun if i am bored(turned off every TV in a busy sports bar a while back just to see what would happen.. lol)
I use it for a lot of legit stuff for my job as well...
I've got mine, but I have no attachments for it to have some real fun with it yet.
I download Evil Portal and Flipper Unleashed. I've had it for about a month and
a half. I made it change my TV lol
For my Samsung it wont allow Google pay to activate without the fingerprint.
pixels too. Its an android thing not a Samsung thing. Pixel 6 pro had that feature so at least 3 years old
pretty sure you can use google wallet and set it to only allow while unlocked etc
What temp sensor are you using, a DHT11 or DHT12?
DHT22 amzn.to/3tosZEU
@@andykirby , thanks! Will get it now 👍.
I want this.
Amazing gadget!
Is buying a new flipper now worth it, I heard the new one's now comes with a throttled down firmware.
You can flash ANYTHING on it
I guess you figured it out ages ago, but just in case... the stock firmware has a region-specific frequency lock, but you can install alternative firmwares to remove that lock.
A technical neonderthal (minister) in the Canadian government has proposed banning the FLIPPER ZERO ONE so, being a freedom loving Canadian, l had 200 PCBs knocked off. Our version is different in appearance and uses a ESP chip.
Living next to the world's workshop (China) l ordered up piece-part kits (you can get anything there) so l am shipping D-I-Y kits to a friend in Toronto.
There are numerous FOI unite for sale in China (and likely near you) AND plug in extension cards.
'Xtreme' firmware Andy......(extended range)......Wink Wink... ;)
This.. Xtreme is the best.
cool. can it hack my smart electric meter ?
I want cheaper electric
You don't need to hack the meter just bypass it and your electric will be free 👍
@@joefrayling9263is there a guide on this anywhere? Asking for educational purposes.
no it cant.. I knew someone who had one of those prepaid meters who built a DIY faraday cage around it so it could not be remotely monitored or shut off.. seemingly worked for a pretty long time until the utility co. eventually came knocking and got into the back yard to fuck with it in person.. fairly certain tampering with those can be a criminal thing in a lot of places as well LOL happy hacking!
@@SUPERNINTENDOHALMERZ it is criminal, and putting a Faraday cage around it to block the RF signal will alert them to it being tampered with because they suddenly receive no signal.
Bypassing it with a physical cable however doesn't alert them atall except for your drop in power usage which is nothing out of the ordinary.
I'm an electrician I've been messing around with meters almost daily for 12 years never had repercussions from it even though as an electrician it's illegal for me to touch them (because I'm not a meter monkey and don't work for a provider) I've bypassed them myself while at work, I've seen them bypassed in all sorts of ways, some of which quite clever - some completely mental.
Just for posterity an example of a clever version is where someone had bypassed the meter through a switch hidden behind a panel in their cupboard so when the energy company came out they hit the switch and it unbypassed the meter, am example of a mental version was someone had put a screw through each of the lines and then just stuck a fork ontop of the screws 🤣 it worked but it was sketchy AF
your cat is beautiful chonk
I'm definitely not going to buy one and stand in the middle of a carpark 👀 ... brb
@@ts757arse I live right by a huge shopping centre 🤫 locking people out of their cars while they shop sounds hilarious 😏😏
DEFINITELY DONT GO TO A TESLA OR TOYOTA LOT AND JAM THE FREQUENCIES THEY USE.. I HEAR THAT CAN CAUSE ALL SORTS OF CHAOTIC FUN AND MISTIEF... so I hear... I am an adult so I would NEVER do such an obnoxious thing ;-)
@@SUPERNINTENDOHALMERZ I will absolutely not do that.
Maybe.
I’ve seen a few videos on these things but I’m yet to find a compelling reason to buy one.
Yes, if you have to ask yourself whether to buy it then it's not for you.
@@andykirby - That’s a great rule to live by! I hope you continue to find yours useful.
@@SUPERNINTENDOHALMERZ - I didn’t mean like that. Personally I’d rather buy a hackrf, but I don’t need that or a flipper. I have a load of other tools that are better at what they do, including a handheld spectrum analyser, etc.
Most of the things you can do with the flipper you can to with cheaper devices, like the ESP32 boards they sell on ebay for a couple of dollars, are great for deauthing and other wifi attacks like MITM.
@@cthoadmin7458 - I never really got into ESP32 boards, but I probably should try. I did a bit of Arduino stuff in the past though.
I’m pretty sure Apple Pay generates a new temp card number for every payment, thus grabbing that with nfc might not be useful.
There's already a new attachment for the flipper to magspof for credit cards
a £10 device marketed at £170 for people who keep their hoods up indoors
FYI, these Flipper Zeros are basically useless without some of the external addon module boards. Because the range of all the internal radios is basically like 3 feet. With an external module board, like the 3-in-1 boards that have WiFi, 433mhz, and 2.4ghz NRF, you get MUCH longer ranges for transmit and receive.
The range of the subghz radio is more than 3 feet, it's probably double that of a car keyfob for example.
only somewhat true.. the receive range of subghz RF stuff can be pretty impressive and you do 100% need a board for wifi and stuff for sure.. but to extend your subghz stuff you just need a $2 cc1101 module and a couple of dupont jumper wires to run into the GPIO socket on top...
I just want to be able to mess with the Bluetooth radio connections of the vehicles with big subwoofers parked in front of my building in the middle of the night.
I'm not licensed but over here these are not illegal to own or use unless you are using it to jam signals or card skimming. Or using it to steal other's info. Other than that these are legal without license.
Wait, why would you put a keyfob in a faraday cage?
Are you able to wake the fob up from the other side?
The only time it transmits anything is when you press a button, and you want it to at that point...
Key fob will transmit if it receives a challenge from the car.
@@andykirby interesting!
The main issue is due to the proximity unlocking (where simply walking up to the car causes it to unlock) the car and key are always searching for each other.
So you can use some radio gear to relay the conversation between the car and the out of range fob
A lot of manufacturers have no added timing checks which catches a lot of the relay attacks.
Of course the real question is why on earth does anybody think they need proximity unlocking in the first place (it's not that hard to press a button.)
nice quads
Does anyone out here have one of they torches that are that powerful it can fry an egg in a pan??
Thanks in advance 📻🔦
Thanks to Justin Trudeau and the Streisand Effect, I've ordered one for myself!
Me too
*Are there any competitors toward the Flipper Zero??*
Hack RF portapak
It’s a multi tool, so there are lots of cheap devices that will do one of the features that FZ can do. It will probably do that feature better too.
For example, an IR Blaster can be picked up for around £3
Thought that was Larry Byrd for a sec
Ooooh ... can I just wear a tinfoil hat? I'm worried the flipper may copy my 4k of brain ram :-)😂
I have one fully kitted out and unlocked
Which firmware did you go with?
@@devnuls Xtreme is best
11:02 what do you mean, that this is a shame?
The flipper zero is a hacking gadget. The RF part is only implemented for radio attacks (replay, etc).
Why would the dev include extra hardware or a more powerful processor to demodulate something the device is not intended to do? (Plus a speaker)
Well yeah obviously the developers not going to include that because then the device will get banned everywhere
I concur regarding 446MHz, unable to display anything from there and a bit lower although I've not tested how low yet.
Ive not looked into the balun on the board but this may be a factor.
When Larry Bird talks, I listen
That MOFO will get you in trouble. Lol
I'd love to see a practical, useful use for this product. Who gives a crap about robbing kids of credits at D&B?
The rolling code for cars has been hacked with the rf 2 hack plus.
rolling codes are supported on all the aftermarket Flipper Zero firmwares(Xtreme is the best IMO.. happy hacking!)
Ive replaced my rolling code fob with a flipper zero! Its 100% possible if you know what you’re doing
169 Euro ?? hahaha flips me off!
This would be perfect for my parents when they lose the tv remote or car keys stuck in the car
You started with saying you could use it as a alternative to having multiple key fobs. Immediately, you say if you store key fobs on it you'll wish you didn't, because that is not what they are for, and it'll cost a lot of money. That is so confusing...
No I didn't 🤷🏻♂️
My bad.@@andykirby
@andykirby dude, 50 seconds in and you imply you can use it as a "remote" key fob for multiple fobs. Not cool man
I thought so. I'm so new to this that any clarification really helps. Thanks!@@thestoneycat
lol green bubbles.
It is open source so there is opportunity to be creative with it!!!!
💙👊😎
Every NFC phone payment transaction uses a "virtual card number", meaning your ACTUAL card number is never transmitted, and that virtual card number cannot be used online like a normal card number.
this is not exactly true.. Samsung phones that use Samsung Pay/Wallet can blast out raw track data to old school stripe readers and it works..(depending on your card BIN etc.. of course) Though this is not NFC it just uses the same antenna and such
@@SUPERNINTENDOHALMERZthat's only true if you're using the outdated Samsung phone the newer phones for the last 5 plus years do not use the loop pay technology anymore
Stock software does not store creditcard data
oh dear oh dear.
Catch any one trying to do that to my car I have hickory a pick axe shaft and his remote will be permanently blocked 2 or 3 wacks works wonder's
Apple Pay is supposed to generate a new card number for each transaction…
Im not 100% sure on this but hondas dont use a rolling code. Anyone know anymore info?
there is a well known exploit to attack SOME Hondas RF fobs.. but MOST Hondas(after 2011 or so) now use rolling codes.. you can still do replay and relay attacks though if you really want to..
i heard about someone's pacemaker got screwed up by a neighbour with a flipper
Probably using custom firmware
No you can add a attena and it will start cars.
Lol. Why is it bad for it to read the card number as intended? You can also look at card, lol. It's not a security issue. The number won't help you without other codes.
im getting a hackRF & portapak
Doesnt work on new models cars who use rollkeys.
Just a PSA, car companies have not done one thing to slow down car boosters.
Not actually the case, several have implemented timing checks to block relay attacks which has reduced the odds of an attack being successful
but can it nick a BMW ?
That's what the little oiks want to know
What kind of FOB uses ABCD instead of the lock/unlock icons etc... 😂
apparently it can do rolling codes.....i doubt that
It can yeah but you have to know what you are doing
Sure, but if you attach anything that amplifies it’s bandwidth then things begin to get interesting
Have you tried hacking a drone in flight ?
Good luck getting your hands on a REAL one
You made this seem easy but you have to do some work to get it setup. It is not plug and play.
I wouldn't hot plug your boards like that
Can i pwease have one?
Thise flippers are capable of some seriously nefarious shit. Like highly illegal shit.
True. They are also very capable of a lot of legal, entertaining fun shit too..