SkyJack is a drone engineered to autonomously seek out, hack, and wirelessly take over other drones within wifi distance, creating an army of zombie drones under your control. by Samy Kamkar // code@samy.pl // Dec 2, 2013 Follow me on twitter: @SamyKamkar Discover more of my technology at https://samy.pl Today Amazon announced they're planning to use unmanned drones to deliver some packages to customers within five years. How fun would it be to take over drones, carrying Amazon packages…or take over any other drones, and make them my little zombie drones. Using a Parrot AR.Drone 2, a Raspberry Pi, a USB battery, an Alfa AWUS036H wireless transmitter, aircrack-ng, node-ar-drone, node.js, and my SkyJack software, I developed a drone that flies around, seeks the wireless signal of any other drone in the area, forcefully disconnects the wireless connection of the true owner of the target drone, then authenticates with the target drone pretending to be its owner, then feeds commands to it and all other possessed zombie drones at my will.

SkyJack also works when grounded as well, no drone is necessary on your end for it to work. You can simply run it from your own Linux machine/Raspberry Pi/laptop/etc and jack drones straight out of the sky.parrot ar drone ubuntu SkyJack (available from github) is primarily a perl application which runs off of a Linux machine, runs aircrack-ng in order to get its wifi card into monitor mode, detects all wireless networks and clients around, deactivates any clients connected to Parrot AR.drones, connects to the now free Parrot AR.parrot ar drone calibrationDrone as its owner, then uses node.js with node-ar-drone to control zombie drones.parrot ar drone 2 mode d'emploi I detect drones by seeking out any wireless connections from MAC addresses owned by the Parrot company, which you can find defined in the Registration Authority OUI.new parrot ar drone unveiled at ces

I use aircrack-ng to put our wireless device into monitor mode to find our drones and drone owners. I then use aireplay-ng to deauthenticate the true owner of the drone I'm targeting. parrot ar drone essaiOnce deauthenticated, I can connect as the drone is waiting for its owner to reconnect.x rebirth drone trojan I use node-ar-drone to control the newly enslaved drone via Javascript and node.js.Drone 2 is the drone that flies around seeking other drones, controlled from an iPhone, iPad or Android, and is also the type of drone SkyJack seeks out in order to control. SkyJack is also capable of seeking out Parrot AR. The Parrots actually launch their own wireless network which is how the owner of the drone connects. We take over by deauthenticating the owner, then connecting now that the drone is waiting for its owner to connect back in, exploiting the fact that we destroyed their wireless connection temporarily.

I use a Raspberry Pi to drive the project as it's inexpensive, reasonably light, has USB, and runs Linux. I use the Alfa AWUS036H wireless card which supports raw packet injection and monitor mode which allow me to deauthenticate users who are legitimately connected to their drones. I also use the Edimax EW-7811Un wireless USB adapter in order for SkyJack to launch its own network. This allows me to connect to SkyJack from my laptop or iPad and watch all the other drones as they're being controlled. I suggest any USB battery which is light (under 100 grams), and can output close to an amp (1000mAh). The Raspberry Pi + wifi will likely use about this much juice. You could also possibly hook up three AAA batteries together to get about 4.5V out which would be a bit lighter, though I'm not sure how much current it will be able to output. Feel free to contact me with any questions! You can reach me at code@samy.pl. Follow @SamyKamkar on Twitter or check out https://samy.pl for my other projects.

SkyJack is a drone engineered to autonomously seek out, hack, and wirelessly take full control over any other drones within wireless or flying distance, creating an army of zombie drones under your control. by @SamyKamkar // code@samy.pl // http://samy.pl // Dec 2, 2013 Follow @SamyKamkar on Twitter or check out http://samy.pl for my other projects.A security researcher has released software and technical instructions for modifying a drone so that it can identify and hijack other drones.Security researcher Samy Kamkar created the hacker drone, which uses the Parrot AR.Drone 2.0 radio-controlled quadcopter -- a popular unmanned helicopter with four rotors.Made by French wireless products manufacturer Parrot, the AR.Drone 2.0 has a built-in Wi-Fi wireless controller that's used to control the drone remotely from iOS or Android mobile devices.Kamkar's drone carries a Raspberry Pi embedded computer running Linux and has two USB wireless adapters connected to it, an Alfa AWUS036H Wi-Fi network card with an external antenna and an Edimax EW-7811Un nano Wi-Fi adaptor.

A lightweight 1000mAh USB battery is also part of the payload and powers the Raspberry Pi.The Alfa Wi-Fi adaptor is important because its wireless chipset can run in monitor mode. The monitor, or RFMON (Radio Frequency MONitor), mode can be used to monitor and inject raw packets into other wireless networks without being connected to them, Kamkar said in his SkyJack presentation video.Kamkar developed a Perl application dubbed SkyJack that runs on the Raspberry Pi and uses other open-source software to hijack drones.SkyJack uses the Alfa adapter's monitor mode to identify other Parrot AR Drones by their MAC addresses, which all contain Parrot's vendor identifier, and then attempts to deauthenticate their real owners.This is done using Aircrack-ng, an open-source program for hacking into wireless networks. According to the Aircrack-ng documentation a deauthentication attack "sends disassociate packets to one or more clients which are currently associated with a particular access point."Once the real owner is disconnected from a targeted drone, SkyJack connects to it pretending to be the owner and starts sending commands using node-ar-drone, an open-source library that implements the networking protocols used by the Parrot AR Drone 2.0.The Parrot drone with the Raspberry Pi attached is only needed for mobile attacks, but the SkyJack application can also run from any Linux laptop on the ground and hijack drones out of the sky

, Kamkar said in a blog post.The researcher released SkyJack on GitHub and said that the idea for creating a drone hijacking application came to him after reading that Amazon is considering using drones to deliver packages."Today Amazon announced they're planning to use unmanned drones to deliver some packages to customers within five years. "How fun would it be to take over drones, carrying Amazon packages...or take over any other drones, and make them my little zombie drones. Kamkar is known for releasing the infamous Samy cross-site scripting worm on MySpace in 2005, forcing the company to temporarily shut down the website, an act for which he served three years of probation during which he could not use a computer. Since 2008, he has been involved in security research, uncovering a serious flaw in PHP, exposing privacy risks associated with the collection of GPS coordinates and wireless network information by mobile devices, and releasing Evercookie, a highly persistent browser cookie that demonstrates how many technologies can be used to track users.