The Ford Hack Raptor Captor video
Ford keyfob security flaws—exploitation techniques for denial of service and vehicle control.
Summary
Woody presents "The Ford Hack Raptor Captor," a comprehensive technical breakdown of radio frequency reverse engineering and protocol vulnerabilities uncovered in modern Ford automotive key fobs.
[10:56] Woody analyzes the wireless communication architecture utilized by Ford remote keyless entry (RKE) systems, which transmit on 315 MHz and 902 MHz using frequency-shift keying (FSK) and amplitude-shift keying (ASK) modulation schemes. He examines the proprietary rolling code protocols designed to prevent replay attacks, demonstrating how weaknesses in synchronization and signal validation permit unauthorized interception and exploitation.
[21:31] The presentation walks through capturing and demodulating key fob signals using Software Defined Radios (such as HackRF and RTL-SDR) alongside GNU Radio flowgraphs [47:09]. Woody demonstrates an attack that induces a denial-of-service against the legitimate key fob without requiring active broad-spectrum radio jamming. He introduces the "Raptor Captor" hardware tool and demonstrates capturing unlock sequences [34:01], manipulating rolling counter windows, and replaying unauthorized vehicle access commands.
(AI summary — Gemini Flash)
Related talks
Ekoparty Security Conference·41 min
Drew Suarez y Daniel Mayer
Discusses drew Suarez y Daniel Mayer - Dont Be a Dummy: A Crash Course in Automotive Security and evaluates key implications for security practitioners.
Security BSides San Francisco·50 min
Outlines BSidesSF 2012 - Yet Another Type of Application Layer Denial of Service Attack... (Sergey Shekyan) and evaluates key implications for security practitioners.
The Linux Foundation·27 min
Michalis Pappas
Investigates A Leap in Automotive Security through Unikernel-based De-aggregation and evaluates key implications for security practitioners.