RFCommotion: Invisible Serial Ports Flying Through the Air
Kamel introduces RFCommotion, an open-source auditing tool for testing Bluetooth RFCOMM virtual serial port services attached to vehicle head units and IoT devices.
Summary
The Complex Protocol Stack of Modern Bluetooth
Bluetooth encompasses multiple sub-protocols layered together, with Radio Frequency Communication (RFCOMM) emulating RS-232 serial ports over wireless links.
Auditing In-Vehicle RFCOMM Channels
Kamel explores how automotive infotainment head units and telematics modules expose unauthenticated or poorly segmented RFCOMM endpoints.
Introducing the RFCommotion Testing Framework
The author demonstrates RFCommotion, an open-source tool developed to enumerate, fuzz, and interact with RFCOMM serial channels attached to automotive microcontrollers.
Hardening In-Vehicle Bluetooth Stacks
The presentation provides recommendations for automotive software architects on implementing strict pairing policies, service authorization, and channel segregation.
Related talks
Creator Stage·27 min
Kevin Mitchell
Details the discovery and exploitation of CVE-2023-52709 in the Texas Instruments BLE5-Stack, causing denial of service in bonded peer devices.
Creator Stage·48 min
Vladyslav Zubkov · Martin Strohmeier
Releases BlueToolkit and discloses 64 Bluetooth Classic vulnerabilities across 22 modern cars and aircraft flight management systems.
Creator Stage·20 min
Yso · Martin Strohmeier
Demonstrates novel Bluetooth Classic exploits across modern automotive infotainment units and avionics flight management systems.