3 ms·
trackerjacker also provides a simple python plugin system that makes it trivial to extend to do all sorts of interesting things (e.g. to look for anomalous wifi
by calebm 8y ago
trackerjacker also provides a simple python plugin system that makes it trivial to extend to do all sorts of interesting things (e.g. to look for anomalous wifi devices). One of my original use-cases was to trigger my sirens if a security camera detected motion (based on a data thresholds that uploading a video triggers).
I demoed this at Thotcon and DEFCON this year and will be demoing it at Derbycon in October.
- ifoundthetao 8y agoAwesome! I saw your presentation at Thotcon two years ago, but moved to Austin this year and ended up missing it. Always excited to see what new stuff you have coming out, as it's organic and deep. Keep 'em coming!
- calebm 8y agoThanks, appreciate the feedback!
- woodrowbarlow 8y agoi plan on setting up an "IoT sentinel" daemon on my router: it would just watch my home network and let me know if my toaster has joined a botnet, based on suspicious network activity. is trackerjacker the right tool for me?
- calebm 8y agoThat's an ideal use-case of trackerjacker. Another good one (that I'm meaning to write a better plugin for) is to alert on anomalous devices nearby. I have a draft of that plugin here: https://github.com/calebmadrigal/trackerjacker/blob/master/plugin_examples/find_nearby_strangers.py https://github.com/calebmadrigal/trackerjacker/blob/master/p.... It might also serve as a prototype for what you're trying to accomplish.
- dsl 8y agoHave you looked at MAC randomization filtering at all? It should be easy to filter based on probe vs established.
- calebm 8y agoJust lightly. Seems difficult to detect for sure, but probabilistically some insights could be gained.
- thedangler 8y agoThis is convenient! I was just thinking I want to build a funny way of letting me know someone was added to my local network by playing a wolf howl on my sonos speaker. I'm guessing this is possible with Trackjacker.
- askz 8y agoYou can do it with openwrt too. Simply add a hook to dnsmasq when a new IP is assigned.