{"id":535,"date":"2025-12-22T20:24:39","date_gmt":"2025-12-22T19:24:39","guid":{"rendered":"https:\/\/www.hardwaresecurity.it\/?p=535"},"modified":"2025-12-23T11:29:59","modified_gmt":"2025-12-23T10:29:59","slug":"hacking-a-x-ray-machine-with-whidelite-evilcrowrf","status":"publish","type":"post","link":"https:\/\/www.hardwaresecurity.it\/?p=535","title":{"rendered":"Hacking a X-RAY Machine with WHIDelite &amp; EvilCrowRF"},"content":{"rendered":"\n<figure class=\"wp-block-image aligncenter is-resized\"><img decoding=\"async\" src=\"https:\/\/miro.medium.com\/max\/1061\/1*jezAfI3M8erIJuKi9hBTng.png\" alt=\"1*jezAfI3M8erIJuKi9hBTng\" style=\"aspect-ratio:1.1191659088851567;width:359px;height:auto\" title=\"Hacking a X-RAY Machine with WHIDelite &amp; EvilCrowRF\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\" id=\"6217\">The first thing struck my curiosity, even before purchasing it, was its remote. Which were the odds that the little teeny-tiny remote was just using an ASK\/OOK modulation with no replay-attack protection whatsoever?! Very high of course.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter is-resized\"><img decoding=\"async\" src=\"https:\/\/miro.medium.com\/max\/1235\/0*ysd8BerW9mK43FU-\" alt=\"0*ysd8BerW9mK43FU\" style=\"aspect-ratio:1.1018069436612432;width:423px;height:auto\" title=\"Hacking a X-RAY Machine with WHIDelite &amp; EvilCrowRF\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\" id=\"762e\">Nonetheless, I ordered it anyway and used it as an excuse to try again my <a href=\"https:\/\/github.com\/whid-injector\/whid-31337\"><strong>WHIDelite<\/strong><\/a> and the new toy that Joel sent me over (<a href=\"https:\/\/github.com\/joelsernamoreno\/EvilCrow-RF\"><strong>EvilCrowRF<\/strong><\/a>).<\/p>\n\n\n\n<p id=\"72ef\">But first let\u2019s follow a more-systematic approach with HackRF and URH:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Frequency is confirmed being set around 315MHz<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image aligncenter is-resized\"><img decoding=\"async\" src=\"https:\/\/miro.medium.com\/max\/1235\/1*83TtF9zUFTw9aUs1h4KdBQ.png\" alt=\"1*83TtF9zUFTw9aUs1h4KdBQ\" style=\"aspect-ratio:1.4050206390991586;width:495px;height:auto\" title=\"Hacking a X-RAY Machine with WHIDelite &amp; EvilCrowRF\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>After recording a packet we can confirm that is using an ASK\/OOK modulation.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image aligncenter is-resized\"><img decoding=\"async\" src=\"https:\/\/miro.medium.com\/max\/1235\/1*aEeX6FbDU2tyXaFG1zmeBw.png\" alt=\"1*aEeX6FbDU2tyXaFG1zmeBw\" style=\"aspect-ratio:2.3127923692909054;width:638px;height:auto\" title=\"Hacking a X-RAY Machine with WHIDelite &amp; EvilCrowRF\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>After creating a simple substitution decoding, we get exactly the same values that both EvilCrowRF &amp; WHIDelite showed during the initial tests.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image aligncenter is-resized\"><img decoding=\"async\" src=\"https:\/\/miro.medium.com\/max\/1235\/1*pm3NEFDnCH0CG2L8FAL9vw.png\" alt=\"1*pm3NEFDnCH0CG2L8FAL9vw\" style=\"aspect-ratio:2.6704646028156582;width:547px;height:auto\" title=\"Hacking a X-RAY Machine with WHIDelite &amp; EvilCrowRF\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image aligncenter is-resized\"><img decoding=\"async\" src=\"https:\/\/miro.medium.com\/max\/1235\/1*eGowjLyLs7mzAR9fEgg1_w.png\" alt=\"1*eGowjLyLs7mzAR9fEgg1 W\" style=\"aspect-ratio:1.6489556245348977;width:541px;height:auto\" title=\"Hacking a X-RAY Machine with WHIDelite &amp; EvilCrowRF\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading has-text-align-center\" id=\"ddb1\">\u2622 This crap is absolutely NOT secure! \u2622<\/h2>\n\n\n\n<figure class=\"wp-block-image aligncenter is-resized\"><img decoding=\"async\" src=\"https:\/\/miro.medium.com\/max\/803\/1*LAhPoeBDg7yzfxwMZ1sJRw.png\" alt=\"1*LAhPoeBDg7yzfxwMZ1sJRw\" style=\"width:331px;height:auto\" title=\"Hacking a X-RAY Machine with WHIDelite &amp; EvilCrowRF\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center\" id=\"3302\">Just for the sake of confirmation, I did replay the packet with both HackRF, WHIDelite &amp; EvilCrowRF. In all cases, the forged packet was successfully received and decoded by the unit, which fired X-RAYs like it was a Marie Curie\u2019s party<\/p>\n\n\n\n<h2 class=\"wp-block-heading has-text-align-center\"><strong>WHID&#8217;s Trainings<\/strong><\/h2>\n\n\n\n<p class=\"has-text-align-center\">The Offensive Hardware Hacking Training is a Self-Paced training including Videos, a printed Workbook and a cool Hardware Hacking Kit. And\u2026 you get everything shipped home Worldwide!<br>For more info\u2026<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"Offensive Hardware Hacking Training\" width=\"500\" height=\"281\" src=\"https:\/\/www.youtube.com\/embed\/zbUuBZJIHkE?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><\/figure>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The first thing struck my curiosity, even before purchasing it, was its remote. Which were the odds that the little [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":538,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_uag_custom_page_level_css":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[21],"tags":[],"class_list":["post-535","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-radio-hacking"],"uagb_featured_image_src":{"full":["https:\/\/www.hardwaresecurity.it\/wp-content\/uploads\/2025\/12\/xray.jpeg",1400,1050,false],"thumbnail":["https:\/\/www.hardwaresecurity.it\/wp-content\/uploads\/2025\/12\/xray-150x150.jpeg",150,150,true],"medium":["https:\/\/www.hardwaresecurity.it\/wp-content\/uploads\/2025\/12\/xray-300x225.jpeg",300,225,true],"medium_large":["https:\/\/www.hardwaresecurity.it\/wp-content\/uploads\/2025\/12\/xray-768x576.jpeg",768,576,true],"large":["https:\/\/www.hardwaresecurity.it\/wp-content\/uploads\/2025\/12\/xray-1024x768.jpeg",1024,768,true],"1536x1536":["https:\/\/www.hardwaresecurity.it\/wp-content\/uploads\/2025\/12\/xray.jpeg",1400,1050,false],"2048x2048":["https:\/\/www.hardwaresecurity.it\/wp-content\/uploads\/2025\/12\/xray.jpeg",1400,1050,false],"woocommerce_thumbnail":["https:\/\/www.hardwaresecurity.it\/wp-content\/uploads\/2025\/12\/xray-300x300.jpeg",300,300,true],"woocommerce_single":["https:\/\/www.hardwaresecurity.it\/wp-content\/uploads\/2025\/12\/xray-600x450.jpeg",600,450,true],"woocommerce_gallery_thumbnail":["https:\/\/www.hardwaresecurity.it\/wp-content\/uploads\/2025\/12\/xray-100x100.jpeg",100,100,true]},"uagb_author_info":{"display_name":"admin","author_link":"https:\/\/www.hardwaresecurity.it\/?author=1"},"uagb_comment_info":0,"uagb_excerpt":"The first thing struck my curiosity, even before purchasing it, was its remote. Which were the odds that the little [&hellip;]","_links":{"self":[{"href":"https:\/\/www.hardwaresecurity.it\/index.php?rest_route=\/wp\/v2\/posts\/535","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hardwaresecurity.it\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hardwaresecurity.it\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hardwaresecurity.it\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hardwaresecurity.it\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=535"}],"version-history":[{"count":1,"href":"https:\/\/www.hardwaresecurity.it\/index.php?rest_route=\/wp\/v2\/posts\/535\/revisions"}],"predecessor-version":[{"id":536,"href":"https:\/\/www.hardwaresecurity.it\/index.php?rest_route=\/wp\/v2\/posts\/535\/revisions\/536"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.hardwaresecurity.it\/index.php?rest_route=\/wp\/v2\/media\/538"}],"wp:attachment":[{"href":"https:\/\/www.hardwaresecurity.it\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=535"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hardwaresecurity.it\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=535"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hardwaresecurity.it\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=535"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}