dhondta / dronesploit

Drone pentesting framework console

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Question about targets and remote control

Haliva opened this issue · comments

Do I need a game remote or can I only do the attack with 2 cell phones?

If I need a game remote, is that good?
https://www.amazon.com/Game-sir-Controller-Joystick-CP-PT-00000220-01/dp/B07CPFL5SK

Is the result I got in the screenshot normal?
Look at Targets ...
image

commented

Hi @Haliva

  • What you get on the screenshot is the list of targets with their characteristics as from airodump-ng. You also get the connected stations in the last field. What you see here is perfectly normal.

  • As you can see, your Tello Mini-Drone is fully open (Enc is set to OPN), meaning that there is no security on drone's WiFi AP. This means that you can simply connect with any remote control able to communicate (that is, with the right protocols) with this drone. Basically, any WiFi-capable device will be able to connect on it but it will require software to command drone's fly control (i.e. what drone's smartphone app does).

  • So, the remote control you referenced will certainly work well, but I guess it won't with a large range of models. Therefore, I advise you to control the drone through the smartphone app provided for the purpose. Please note that there is currently no interface for piloting the drone directly from Dronesploit, this is still work in progress. Up to now, it only has a few capabilities for some drone models to perform limited actions (e.g. takeoff, emergency landing, change drone's AP SSID or password).

  • If you mind contributing to the modules of this drone model, I advise you to reverse engineer the Android app and to guess the protocol. It should be very simple and straightforward with a self-explanatory set of commands (e.g. TAKEOFF) somewhere in the app that would give you the necessary data to write test scripts. Then, we can transform them into modules. You can get a bit more information on making modules here (please note that the documentation is still a bit succinct, this is also work in progress ; any feedback is of course welcome).