Can The Flipper Zero HACK A TESLA?
Vložit
- čas přidán 28. 12. 2022
- The Flipper Zero has a lot of crazy features but thankfully car manufactures can outsmart most of them.
Thank you for watching!
Buy My BLUE Mat :a.co/d/h3iPG3i
Website( Mail-ins are currently closed) : www.phonerepairguru.com/
Second Channel: / @prgrepairtutorials2526
Ask a Question (Join the Subreddit): / phonerepairtalk
PROMO INQUIRIES: sean@prettygoodagents.com
Social:
Check us out on Instagram / phone.repairguru
Or on TikTok www.tiktok.com/@phonerepairgu...
Twitter: therealprg?lang=en
Facebook: / phonerepairguruu
My Repair Tools:
MAGSAFE MAGNETS : geni.us/BgyY
Tools and Organizer( iPhone Screen Stand/ iPad Screen Stand - Microsoldering tools etc) www.wrepair.com (Discount Code PRG5 for 5% Off Entire Store/ Discount Code PRG10 for 10% off $500+ orders)
Charging Hub With Amp Meter: amzn.to/3DzHecF
Qianli Screw Driver Holder: geni.us/QIANLIICUBE
Qianli Screw Drivers : geni.us/QIANLISCREWDRIVER
Display / Battery Programmer: geni.us/QIANLIPROGRAMMER
Tools Used (IFIXIT) : geni.us/JBYJF
Qianli Clamps: geni.us/QianliClamps
My Blue Repair Mat: a.co/d/h3iPG3i
Ifixit Starter Kit: geni.us/STARTERKIT
Phone Cooker (Heat Pad) : amzn.to/3OYQz06
Heat Gun: geni.us/HEATGUN
Electronic Screw DriverP: geni.us/WOWSTICK
Filming Gear:
LUMIX G85 geni.us/G85CAMERA
Lumix GH5 geni.us/PANASONICLUMIXGH5
Rode Wireless Go Mic geni.us/RHODEWIRELESSGO
Rode VideoMicro geni.us/RHODEMIC
Studio Lights geni.us/STUDIOLIGHTS
Spinning Thing geni.us/ROTATINGDISPLAYSTAND
Guru Approved:
Airpods Pro: amzn.to/3Qfel9l
Airpods: amzn.to/3Qmsn9n
Airpods Max: amzn.to/3QknnlB
Airtags: amzn.to/3bqKEmS
Easy Button geni.us/EASYBUTTON
Gameboy Case geni.us/GAMEBOYCASE
MagSafe Phone Cooler geni.us/jCfJoB
Nutella AirPod Case geni.us/PhUZC
Giant AirPod geni.us/GIANTAIRPOD
Nano Leaf Lights geni.us/xuKg
Anker MagSafe Charging Stand geni.us/ANKER
Phone Repair Guru assumes no liability for any damage caused to your phone as a result of any of the information contained in this video.
Do not attempt unless you are open to the possibility of further damaging your device. - Věda a technologie
For those saying I put it on the wrong side, I tried it on the back side and other sides for about 10 minutes. It does not work..
* I also said authentification, I meant authentication :)
There are other ways someone can break into a tesla however, and there are also people who have claimed to have made copies of this card. The best thing you can do to secure your tesla is enable pin to drive.
Everyday when Phone Repair Guru uploads always a banger
Nice
I love your vids I wait for them patiently
Understandable, have a good day
@@MM22362 You too m8
Now imagine walking into a parking lot and seeing that someone has helpfully plugged in ur car
Now thats for the community
imagine if someone *unloads* right where you put the charger, that would be annoying tbh
Someone made a products called the “Karen lock” to help with that
@@himynameisryan oh yea i remember that so those karens cant unplug the charget
@@Grape_Juice6 yeah
"Damn someone charged my car for me..."
Or vandalized it.
@@SomeoneC *shoves gas pump into Tesla socket*
*At long last, a good place to hide my quick setting plaster*
@@WinterAsked *puts a match in a g@s car's tank*
Lol
Aw hell naw man bro stole my car with a toy💀
Bruh
You can steal a Kia with a charger 😐
🤣
@@swiftywas3817 how🤐🫣
I disliked this comment on every account I have.
“Officer, someone broke into my car!”
“What were they using?”
“A Tamagatchi”
*Tamagochi
@@The_SSS Whooosh~
@@The_SSS *tamagotchi
@@VictorTehgkits not a woooosh they were correcting them... wrongly...
Fun fact - the concept of the Flipper Zero was born thanks to something called the 'Pwnagotchi' - which is software built for a number of Raspberry Pi's, mainly the Pi Zero W with an e-ink display, that is built solely to hack into Wireless networks, by capturing hashed handshakes.
I’ve watched your videos for years now! I’ve enjoyed them very much! Keep up the good work!
Enna maame indha pakkam🎉
Everyday when Phone Repair Guru uploads always a banger
“Oh look hunny, i left the damn charge lid opened”
The Butt Hole. LoL 😂
It automatically closes when you get in the car too, so you don’t even have to realize it. 😂
@@ridafkihwe ruinin jokes with this one💪🏻💪🏻💪🏻
@@BigDRandy90 we ruinin the ruined joke with this one 🤯🗣️ 🔥🔥
I'm awake again, no worries, that was a short, good night ♥️
That means you are definitely from Pakistan
@@hassanahmed7707 nah
@@hassanahmed7707 think bro, there are many, MANY places with the same time or a little difference
Same thing happening to me right now lol
@enrique amaya Jesus is a pedo confirmed?!!11?!1
When the car is being unlocked by the card, there is a vulnerability period for about 2 seconds where the authentication signal can be copied and used on ANY tesla of the same model because apparently they use the same auth signal, but key only gives it for the specific card it’s paired to
Wrong, you'd still need the private key, I'm not sure if the tesla uses Java Card but at this point in history, even RSA hasn't been broken.
@@HectorGonzalez-gw7vkIt has been weakened. If the keysize is small enough, cracking is feasible.
You can mode and create software to exploit those "2 seconds" you just need the know how
@@bjornnuelit’s not fam I’ve looked into it, locked tight like a NBX CSFIre card
@@CarsCatAliensthere’s not an exploit
I need this, f-for educational reasons. Totally not to break into houses, totally
Honestly though looks really interesting to mess around with my own stuff with that
Just to test out their cupcakes
The charge port cover can be opened by a universal RFID signal or by simply pushing the bottom of the cover. It does not allow access to the car or anything, it only opens the charge port.
and it goes back down by itself.
Bro I was watching your last video with the flipper and wondered this exact question. Thank you for reading my mind.
Authentification 😅
Translate to English =icing
What does that say about us honing right in on this. 😅
🤣 Everybody had those days 🕺🏻
"Tesla patchnote 1.6901 fixed the funny charging door opening from funny little remote"
I mean the RFID cards with encryption I would think are pretty common especially with more secure RFID things
"haha! now i can siphon out their ga-
oh."
i’m prob always gonna wonder what the devs of this device were thinking when they were making this?
They just wanted money i guess🤷
Some devious shit for sure
Pen testing... It's also just a glorified board for a TI chip, you can make something that does the same with the chip breakout board..
Is it even legal to buy?
@@eisajariwala6029 im pretty sure it is
It’s called a rolling key, it’s pretty common in cars to prevent this. There are way’s around it but not from the Flipper. You basically trick someone to press the unlock twice by jamming and when catching the signal. When you just sends the first key for them to open the car and you will have 1 working key signature until it’s used or the person unlocks the car again.
Damn, can you give me a name of one of these? Pretty curious tbh
@@BigPolskiMan "curious"
@@BigPolskiMan You can use the flipper to catch the frequency, but you’ll need separate hardware to jam the frequency and prevent it from reaching the car. Keep in mind, like the original comment said, this only works once, so you won’t be able to use it as a regular key.
@@YeInsight Ahh gotycha. I wondered how these things worked, cheers
@@YeInsight @PolskiMan @TheDuck1234 the unleashed custom firmware allows for rolling code support
It's possible the UID (aka the serial number of the card) is only used to identify what card is used. It most likely works like one of those NFC 2 Factor Authentication security keys where the actual data stored on the card can change following a cryptographic pattern. It's also possible that the car needs to send Data to the card as well instead of just reading the data from it normally.
Nobody caught "authentification"?? 😐
I heard that and second guessed if it was right for a solid 5 seconds 😂
I can say with authentificity that I heard it.
Thank you for the information!
"Haha I'm so bad! I'm gonna charge your car!"
And it is an educational device 👍
For research purposes can you steal a car then sell the car 🙃
@@alexistecca408yeah to bring up research cost😂
Always a good day when phone repair guru uploads of video
I watched the other car key vid like an hour ago and I checked if this was uploaded yet and it wasn't and now as soon as it has been uploaded it comes up on my fyp lmao
With an NFC signal receiver, you could place it against the door. Then, with a laptop, a small computer program, a blank key and a card writer, you could create a second key for the car. It costs about 160 dollars to do it.
i feel like i have to buy one of those before they become illegal
"Authentification" 💀
Came to comments for this!
Thank you for debunking this , I knew it wasn’t possible with that thing ppl saying all the time you can hack into a Tesla and drive off using flipper 0 so thank you for proving them wrong
Even if you could get in
You still couldn’t drive off assuming pin to drive is enabled
I mean, he touched the car with the wrong side of the flipper lmao. There isn't any NFC/RFID chip in that flat part that he touched it with. So even if it would work, it wouldn't work with the angle he did in the video lol.
you can just jam the signal of a car key and take the codes that are sent to the car and the car never receives them to open the car until you use them and you can open a car
not really. the cars use variable rolling codes that do not repeat. You need to also decipher a counter.
Do more of these videos
Authentification 😂😂😂😂
Imagine getting your tesla stolen by some baby penguin training toy looking thing
Keep up the great work!!
Flipper Zero is the annoying variant of SCP-079
Authentification lol
I thought I was crazy, glad someone else noticed too
The waffle house has found it's new host
The waffle house has found its new host.
The waffle house has found it’s new host
The Waffle House has found it’s new host
The waffle house has found it's new host
dead reference
Authentication +Identification =Authentification
basically like a garage key, it uses rolling code, so it is still possible
Don’t worry the charge port can only be opened if the car is unlocked
I have a flipper and I can confirm it works when the car is locked as well
@@WildfoxFabrication mine doesn’t let me do it to my dads Tesla..
@@thatscrazy5124 have you tried both the 650mhz and the 270mhz signals
@@WildfoxFabrication I don’t think
My guy just casually have a tesla, danm we getting flexx’d on
“Damn! They done siphoned all my electricity out of my tank!”
"has some sort of authentication" lol
I saw someone on tiktok change the gas prices with the flipper zero
Same
HE SAID, *”AUTENTIFICATION”!!!!!*
The car and keys have something called rolling codes so the code it transmits changes every time the key is used to access and start the vehicle
Damm this cool asf keep up the good videos like you actually give really good tips and info ,I recommend your channel to all my techy friends
appreciate it!
That device is fun to use. I’ve been doing some testing
Actually it gives a signal when it's touching the car, if not the card as NFC, but the authenticated connection between them might be able to capture. So while you touch it someone might be able to replicate that signal that's going on between them. Unsure if it works, but that's a thing that works with things.
Regular cars use rolling code meaning the signal for the button is different each time with their car keys, not all cars have it but most do.
I need flipper zero in my life right now
I believe that the reason the flipper did not work may be because of rolling code , most modern cars use rolling code in the key fobs , so as such the code is constantly changing with every click or tap in this case . This being a very effective method that unfortunately stops the flipper in its tracks.
if i press a button while standing out of range, and will write this signal from fob. why i can open car with it? Car supposed to thing this is a signal from a fob, and the car was out of range while i was recording the signal
So you have to have their card to take the signal? at that point just use the keys!
the Tesla card and car use something that's called a "Rolling Authentication Code", which can sometimes be mistaken for a high tech stuff but its as simple as it sounds, they use rolling codes to authenticate the action to unlock. Just elegant.
Love the vids bro keep it up
This thing is so dangerous that it's actually illegal to have one in my country.
I love when the video’s finish 😊😊
didnt know teslas had an authentification process
You are right, the Tesla keycard does have a secure protocol and it never generates the same signal.
However even if the card wasn't secure it wouldn't work because you touched the reader with the IR module instead of the NFC module. The correct way of reading/transmitting NFC and RFID with the flipper is making contact with the back of it on the reader, as the coils are located on the back (on the other side of the buttons) rather than on the side.
Try keeping the back of the flipper on the door as you kept the sub-ghz scanner part of the flipper near the scanner.
Bro got that watch dogs 2 device
Im not exactly sure how those cards work but it might just also use rolling codes just like rc car keys. Its a random generated string which is changed everytime you lock/unlock the car. The rolling code is then given to the car and the key. If they dont match because you are trying to hack it for example, you might break your key. This is because the car will still generate a new rolling code but now the key has not changed its rolling code. Theres a chance you have to rescript it.
You dont know this from me:
Most cars are hacked by jamming the car so it cant receive any signal at all. You wait for the owner to try to unlock it. You catch the signal, the car never received the signal, meaning it didnt regenerate its rolling code. You now can unlock the car ONCE but only once because your hacking device does not follow the rolling code generation process (obviously).
Most cars nowadays have rolling codes but if you see a really old car you can try to bruteforce the signal it takes to unlock itself and there wont be any security to that.
Now to the start engine part. Here the fun stops. Most keys contain a chip for a second security segment. The pistons start moving but the car wont start as long as this chip isnt detected nearby.
If you really want to hack anything, you will probably need to break in somewhere or have social engineering skills.
And remember that you never heard of me.
"dad why is your tesla light moving?"
"idk"
"Prank em John!"
That device gotta be illegal in some way
you cannot prohibit a lock pick, you just make better locks ;)
An easy fix for that is to use components that it uses like the nfc transceiver and program the auth sequence in by manual methods. It’s tedious but possible
Nothing like a good authentification ;)
Add it as a key from the Tesla centre con
Cars used to use something known as rolling key codes. Both the car key and the car has a list of codes that were ticked off as each code was used in the list, eventually the list the would repeat its self. Nowadays when you unlock a car the car and the car key will agree on the algorithm based on the previous algorithm for what algorithm should be used next to create a stream of bits.
Damn looks like someone need to make a new gadget to steal tesla
Where do I buy this . FYI it's for educational purposes:)
Bro just flexed his tesla
"any signal" 😂😂😂😂😂😂😂😂
okay break into a car with a flipper zero or a brick test next please
if you want to steal a car and are close enough to the key.... *_just steal the damm key_*
Wait can you code the flipper with a custom code without scanning cards pls try it
Full vid pls!!!
There’s probably a back and forth communication between the card and car, perhaps asymmetric encryption algorithm is used. This means that the Tesla card has a private key file which you would need to retrieve to break Tesla’s encryption mechanism.
I wonder if flipper zero can confirm the security protocol used
I'm guessing it's like a car key where the signal changes at the moment the door is unlocked
The Tesla cards are similar to transit cards and garage door openers: the chip is encrypted and the Tesla generates a number that the card must encrypt. That number increments for each tap (rolling code) so you can't just copy the code from the card. The car is smart enough to reject codes that it has already seen.
That's the definition of mild inconvenience
Update my shot went well lol
the tesla key that looks like a mini tesla exists
Bro how isn’t the flipper illegal?
stuff like this is not the intended use
Apparently tesla might be using rolling codes which can be a bit hard to crack but still not safe. It almost functions like an IR sensor of the normal car key(if it uses rolling code)
You need to put the flipper by its back because there is the NFC located
He used it in the wrong way. The nfc chip is on the back of the flipper zero
imagine you are naigbor of this man and he keeps putting deez nuts on your charging plot
What would you recommend for someone wanting to join the device repair market? Where do you get parts/what licensing do you have to get Apple parts? How do you get business?
I assume It doesnt work for the same reason it wont work on certain higher end garage door openers and thats because they use whats called a rolling code, every time the "key" is scanned it and the car both switch to the next code in the sequence.
The nfc / rfid antenna is on the back side of the flipper not on the black infrared port on the side.
Authentification. I’m going to use that one from now on
Chargeport only opens, when car is unlocked or if a key is nearby.
Thing is that most 400-500 MHz wireless remotes and receivers use rolling-codes as countermeasure against eavesdropping devices.
"Authentifiaction" 😂
"oh nooo someone charged my car"
A guy hacked into my school locker with that exact device.
As someone who has worked with RFID cards, some less than ideal systems can be hacked with the flipper, but good systems, like the Tesla and a world wide door lock company that shall remain nameless due to my NDA, include a further authentication step which cannot be replicated. Specifically, the system I am familiar with encodes a random 256 bit hash that their locks then reverse hash and verifies. This part is stored in a separate, smaller, antenna in the key cards. Since I know this, and can replicate the key card and have the tools to simulate the key card with my NFC/RFID capable phone, I was asked to sign an NDA when my contract was up. Landed a nice $10k for the NDA tho.
So where do I buy this flipper? (For educational purposes of course)