KaoXx / Xiaomi-Electric-Scooter-3-Lite-PoC

Repositorio donde se expondrán las diferentes pruebas de conecpto del Xiaomi e-scooter para mi TFG

Xiaomi Electric Scooter 3 Lite PoC

In this repository you will find all the proofs of concept regarding the hacking section of my Xioami electric scooter Lite 3 thesis.

Attacks

I have tested against the scooter:

• ESP32 Attacks (RF and DoS)
• ESP32 Bluetooth Spam
• ESP32 Spoofing
• Flipper Zero BLE Spam

Logs

In the bluetooth communication of the scooter with the Xiaomi application I have collected the following logs:

• Scooter Logs

CVE-2019-12500

I have updated a script based on CVE-2019-12500, which affected scooter firmware versions <1.5.1.

Script based on https://github.com/louiscb/Mi365Locker-RASPI that allows us to send lock and unlock packets to the scooter through its BLE module for linux systems:

• CVE-2019-12500.py