explorer’s guide to shooting satellite transponderss-guide...#! credits • inspired by adam...
TRANSCRIPT
![Page 1: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/1.jpg)
Explorer’s Guide to Shooting Satellite Transponders
~ Jay Turla
![Page 2: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/2.jpg)
#! /usr/bin/whoami
• Application Security Engineer at Bugcrowd Inc.
• One of the goons of ROOTCON – the premiere hacking conference in the Philippines
• Former Senior Security Consultant at Hewlett-Packard Enterprise (Fortify on Demand)
• Acknowledged and rewarded by Facebook, Adobe, Yahoo, Microsoft, Mozilla, etc. for his responsible disclosures
• Contributed auxiliary and exploit modules to the Metasploit Framework e.g. Zemra, w3tw0rk, Phoenix Exploit Kit exploits
• nullcon virgin :)
![Page 3: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/3.jpg)
#! disclaimer• Some memes and images may have explicit meaning in them but
hope you don’t get angry with me ;)
• Topic is limited to shooting TV sat transponders + the hardware risks
• The views and opinions expressed are not from my employers
![Page 4: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/4.jpg)
#! credits
• Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at Black Hat DC 2009
• Inspired by “Hacking a Bird in the Sky: The Revenge of Angry Birds” by Jim Geovedi, Raditya Iryandi, and Raoul Chiesa
• My father for the equipments and hardware
• lyngsat.com - a good resource for beaming all those transponders
• Filsat and PhilDISH - satellite association groups / forums in the Philippines
![Page 5: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/5.jpg)
#! how to shoot the sat transponders?
![Page 6: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/6.jpg)
#! why do we shoot?
• Free Radio and TV
• It’s a geek thing
• It’s a hobby
• for fun and profit
• Card Sharing (illegal stuff)
• You can watch free Pr0n
• …wait I didn’t add that one ^
![Page 7: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/7.jpg)
#! you can watch free……
• Reference: http://rintosingkep.blogspot.com/2013/04/zamjari-tv-channel-khusus-dewasa-di.html
![Page 8: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/8.jpg)
#! previous slide explanation
• Just a fact that such thing exists and just for educational purposes (some are FTA, some have keys)
• Not to promote p0rnography (seriously) - don’t ask me how
![Page 9: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/9.jpg)
#! satellite hobbyist starter pack
![Page 10: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/10.jpg)
#! satellite hobbyist hardcore pack
• Satellite receiver
• C (4 - 8 GHz)/ Ku (12 - 18 GHz) Band satellite dish
• Ant Cables / TV Cables
• Monitor / TV
• Smart Cards
• Internet connection
• Routers
• Satellite Finder (Digital / Analog)
• Umbrella (it’s freakin hot setting up the dish)
• LNB (Ku / C band)
• PCI DVB-S2 Digital Satellite Tuner Card for PC
![Page 11: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/11.jpg)
#! PCI DVB-S2 Digital Satellite Tuner Card for PC (Sample)
![Page 12: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/12.jpg)
#! sat frequencies and bands
• reference: http://www.inetdaemon.com/tutorials/satellite/communications/frequency-bands/
![Page 13: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/13.jpg)
#! sat frequencies and bands
• reference: http://www.esa.int/spaceinimages/Images/2013/11/Satellite_frequency_bands
![Page 14: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/14.jpg)
#! now choose your satellite
![Page 15: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/15.jpg)
#! now choose your satellite
![Page 16: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/16.jpg)
#! now choose your satellite
![Page 17: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/17.jpg)
#! start the scan
![Page 18: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/18.jpg)
#! choose the scanning method
![Page 19: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/19.jpg)
#! scanning
![Page 20: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/20.jpg)
#! introducing the risks and simple hacks of the hobbyists for the hardware
![Page 21: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/21.jpg)
#! echo “Hello World”
![Page 22: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/22.jpg)
#! if there is a shell or web interface, there is a way
![Page 23: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/23.jpg)
#! access me
• Dreambox -> root : dreambox
• Some Linux-based satellite receivers have telnet access (try bruteforcing root : root)
• Most Linux-based satellite receivers which have Enigma2 firmware have FTP
• Try the Web UI
• Most don’t have HTTPS :)
• Card sharing credentials / info are stored in plaintext
• dvbsnoop - DVB / MPEG stream analyzer program (http://dvbsnoop.sourceforge.net/ or opkg update && opkg install dvbsnoop)
![Page 24: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/24.jpg)
#! vulnerabilities
![Page 25: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/25.jpg)
#! getting the CCcam information of a box
• https://github.com/shipcod3/cccam-info
![Page 26: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/26.jpg)
#! How do I crack a pay-per-view
• How Do I Crack Satellite and Cable Pay TV -https://www.youtube.com/watch?v=lhbSD1Jba0Q
• Search for Alternative Channels from other Satellite TV’s that are free (satellite feed hunting)
• Card Sharing (Illegal)
• Watch Streaming videos (yeah but we wan’t a better one right)
• and ……
![Page 27: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/27.jpg)
#! Manny Pacquiao Pay-Per-View for free last year
• CAID: 2600 Palapa D (113.0°E)Channel: TVONE3786 H 5632 (MPEG2/$)SID: 0001Provid: nullEven CW: 00 22 66 88 33 55 77 FFODD CW: 00 22 66 88 33 55 77 FF
![Page 28: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/28.jpg)
#! Manny Pacquiao Pay-Per-View for free last year
![Page 29: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/29.jpg)
#! Manny Pacquiao Pay-Per-View for free last year
![Page 30: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/30.jpg)
#! wait how?
• all you need is searching! Biss, Viaccess, Nagra keys etc.
![Page 31: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/31.jpg)
Questions?
• ???
![Page 32: Explorer’s Guide to Shooting Satellite Transponderss-guide...#! credits • Inspired by Adam Laurie’s talk entitled “Satellite Hacking for Fun and Profit” at lack Hat D 2009](https://reader031.vdocuments.net/reader031/viewer/2022030417/5aa2f89b7f8b9a46238dc1a9/html5/thumbnails/32.jpg)
References
• lyngsat.com• http://www.inetdaemon.com/tutorials/satellite/communications/fr
equency-bands/
• http://www.esa.int/spaceinimages/Images/2013/11/Satellite_frequency_bands
• http://rintosingkep.blogspot.com/2013/04/zamjari-tv-channel-khusus-dewasa-di.html